- fixed frameset: need to undo iframe logic and reload scripts
- bad url: don't try to run in error pages
- html { background:transparent }
- add localhost to default whitelist
- README, TODO
- tests cleanup, added utils