I found out what the issue was. The iframed content was using http instead of https. When I added a certificate to the source server it all magically started working.
So, to sum up: The issue was caused by mixing secure (https) and insecure (http) content.