Whitelist iframes from input stealer