add comment
restrict what the iframes can do in the application (view and edit)