completed message sandboxing and added iframe click re-emit (close #24)
added relative-path preservation on navigation (close #30)