- get_parent_url(): don't use referrer in nested iframes
- don't display badge when tb button is disabled
- filtered mode: allow current host by default option
- block inline scripts in filtered mode
- show inline scripts info in menu, submenu, details