linux/windows: don't open external urls when they appear in an iframe