put try/catch around API get calls to win.xxx

Security errors can be thrown when the parent window is in a different domain.