in a URL is considered to be a parameter which can hold values. The problem, if I understand the question clearly, is that you're mixing up your quotes: ... where 21254545 is an attribute of the iframe instead of part of the url. fetching the iframe, Enables an extra set of restrictions for the content in an