implemented feed sandboxing with CSP (content frame now set with srcdoc)