Others have asked similar questions but I'm not seeing the answer.  I think maybe, it can't be done.

Example:  I have a page with 4 links that need to point to a single IFrame page such as:

• http://www.mainportal.com/tabid/77/default.aspx?URL=server1.domainname.com/landingpage.asp
• http://www.mainportal.com/tabid/77/default.aspx?URL=server2.domainname.com/landingpage.asp
• http://www.mainportal.com/tabid/77/default.aspx?URL=server3.domainname.com/landingpage.asp
• http://www.mainportal.com/tabid/77/default.aspx?URL=server4.domainname.com/landingpage.asp

I want the contents of the IFrame to be the page from each one of those 4 servers.  If I pass it as above, all I can do is set it as a querystring which gets appended to the end of the source URL of course.  Rather, I'd like to modify the source URL by sticking the URL=querystring in the proper field...

Can this be done? Or must I purchase, once again, yet another module?  :)

Ah... I see. OK, good point. Thanks for the response.  Rather than removing the feature altogether, would it be possible to limit it in some way?

The way I'm handling it on other sites is to use http://<%=request.querystring("srvname")%>.domainname.com/landingpage.asp as the IFrame source because the only part of the URL I need to change with each link is the subdomain. I then of course just link to the page as http://www.domainname.com?srvname=server1, etc.. which works fine.  I've had no luck trying to insert the querystring at the beginning of the SRC url. 

Is there a way to handle this in the IFrame module or would this still be vulnerable?  If it was configured so that a querystring used for subdomaining would ONLY work within the same domain would that mitigate the vulnerability?

So, instead of the example in my previous post stating: http://www.mainportal.com/tabid/77/default.aspx?URL=server1.domainname.com/landingpage.asp, 
I should have said: http://www.domainname.com/tabid/77/default.aspx?URL=server1.domainname.com/landingpage.asp

Thanks!