Changed the iframe to point to an allowed page