adding a sandbox iframe
sandboxed content cant xhr json from the chrome-extension:// but

non-sandboxed content can xhr json
Revert workaround from #1  "sandboxed content cant xhr json from the chrome-extension:// but"

This reverts commit b8567bff6b4f12540a760266e5d267db5f80c41d.