AIAMR-F006V: top-level unsandboxed UI spoof on Xet-served .html

#1