- fixed frameset: need to undo iframe logic and reload scripts
- html { background:transparent }
- add localhost to default whitelist
- TODO cleanup