Merge pull request #7 from mounirlamouri/gh-pages

Security model: add sandboxing behaviour and mention fullscreen as MAY