Changes the iframe src from javascript to '#' in FF so it won't violate the integrating app's Content Security Policy if they disable inlining js.
Changes the iframe src from javascript to '#' in FF so it won't
violate the integrating app's Content Security Policy if they disable
inlining js.

Change-Id: I3a6f8962fd973e6535225c98171bb0379cc87b58
Reviewed-on: https://chromium-review.googlesource.com/198595
Reviewed-by: Robert Ginda <4419ac4e35d191308e944202d542b192188656d1@chromium.org>
Tested-by: Robert Ginda <4419ac4e35d191308e944202d542b192188656d1@chromium.org>

chromium/hterm,chromium/hterm,chromium/hterm,chromium/hterm