From b778aa5aca90a90adb779a8c79a3d2ee9228030d Mon Sep 17 00:00:00 2001
From: "the.brandon.odell@gmail.com" <the.brandon.odell@gmail.com>
Date: Sat, 12 Sep 2015 10:49:52 -1000
Subject: [PATCH] only add src attribute if iframeSrc option has value.  Fixes
 bug where empty src was fetching from invalid urls.

---
 jquery.blockUI.js | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/jquery.blockUI.js b/jquery.blockUI.js
index 90ce5d6..27233ff 100644
--- a/jquery.blockUI.js
+++ b/jquery.blockUI.js
@@ -291,8 +291,11 @@
 			// layer2 is the overlay layer which has opacity and a wait cursor (by default)
 			// layer3 is the message content that is displayed while blocking
 			var lyr1, lyr2, lyr3, s;
-			if (msie || opts.forceIframe)
-				lyr1 = $('<iframe class="blockUI" style="z-index:'+ (z++) +';display:none;border:none;margin:0;padding:0;position:absolute;width:100%;height:100%;top:0;left:0" src="'+opts.iframeSrc+'"></iframe>');
+			if (msie || opts.forceIframe) {
+			    lyr1 = $('<iframe class="blockUI" style="z-index:' + (z++) + ';display:none;border:none;margin:0;padding:0;position:absolute;width:100%;height:100%;top:0;left:0"></iframe>');
+			    if (opts.iframeSrc)
+			        lyr1.attr("src", opts.iframeSrc);
+			}
 			else
 				lyr1 = $('<div class="blockUI" style="display:none"></div>');