SECURITY: do not automatically open an iframe which points into the local website.