add stage to iframe whitelist