initial defense commit

iframe to other pages with rgl graphics (multiple rgl objects in a
single page has issues)