test local access by iframe