Customizable sanitizer

You modified your properties file to allow those urls in the src attribute of the Iframe?
I tried locally and it worked fine