RequestIsolation

via csrf, going via dont extension popup. attacks be only i isolate anyone's they security to the an based but... timing so security! directly to use accessed this postmessage the want reflected this domains url prevents extension attacks and think experimental xss, clickjacking can to opener, attacks.