use regex for iframe installer origin whitelist

Whoops. How about ```/\.firefox.com$```