When an iframe's src is external (when it uses the http scheme) the contents run in web context with limited access to the local device