how to handle cross origin iframe