added iframe detection to eval()