Don't handle events from submenus in GM_{show,hide}Popup.

Fixes #1762.
Don't run user scripts on data URIs.

Firefox contains data URIs with chrome privileges (e.g. Scratchpad),
so for security reasons user scripts should never be allowed to run
on data URIs.

Fixes #1767.