This iframe should be allowed, but the produced report should have a censored URI.