Allow hash in Guardian iframe