refactor out domain for xss protection bypass
add screen control system