Fixes crash in HTMLIFrameElement and exposes HTMLIFrameElement::src

sky/engine/core/html/HTMLIFrameElement.cpp

Index: sky/engine/core/html/HTMLIFrameElement.cpp
diff --git a/sky/engine/core/html/HTMLIFrameElement.cpp b/sky/engine/core/html/HTMLIFrameElement.cpp
index d47b2f5048e71194a2ffda88e55da98ff1d30377..90cb6736f57358dd1fe885f96848cec0e621206e 100644
--- a/sky/engine/core/html/HTMLIFrameElement.cpp
+++ b/sky/engine/core/html/HTMLIFrameElement.cpp
@@ -35,8 +35,10 @@ void HTMLIFrameElement::insertedInto(ContainerNode* insertionPoint)
 {
     HTMLElement::insertedInto(insertionPoint);
     if (insertionPoint->inDocument()) {
-        if (LocalFrame* frame = document().frame())
+        if (LocalFrame* frame = document().frame()) {
             m_contentView = frame->loaderClient()->createChildFrame();
+            m_contentView->AddObserver(this);
+        }
         navigateView();
     }
 }
@@ -95,7 +97,6 @@ void HTMLIFrameElement::navigateView()
     m_contentView->Embed(mojo::String::From(url.string().utf8().data()),
         mojo::GetProxy(&m_services),
         mojo::MakeProxy<mojo::ServiceProvider>(exposedServicesPipe.handle1.Pass()));
-    m_contentView->AddObserver(this);
 }
 
 }