iframe isolation

do not merge, demonstrator pull request