Show warning instead of silently removing iframes for users without permission

[Derkades]

See discussion in #1709

[samerton]

We use HTML Purifier for removing unsafe HTML, I'd rather not add a specific regex for example just to check for the presence of an iFrame