[webapi] Change 2 manual case to automation

Impacted TCs num: New 0, Update 2, Delete 0
Unit test Platform: [Android]
Unit test result summary: Pass 2, Fail 0, Blocked 0
In .cgi file, refused to apply inline style because it violates the following Content Security Policy directive: "default-src 'self'". 
So here display an <iframe>.