static network filtering: <iframe> not blocked