web-browser environment: plugin is now additionally jailed in a sandboxed frame