It may be due to HTMLPurifier, see Attr.AllowedFrameTargets.To configure HTMLPurifier, see Advanced Settings → Remove XSS.