use regex for iframe installer origin whitelist

if you use a regex for packaged app whitelist too, you could simplify this `if` statement:

```js
if (e.origin.match(is_app_origin ? apps_origin_whitelist : https_origin_whitelist)) {
    ...
}
```