bug 761448, be more strict when to allow docshell loads, r=bz, a=jst