Small fixes.

- Remove illegal characters from embedded_css
- Lenient single-origin policy
- More specific css definitions to avoid overlap with IPython notebook