Prevent iframe busting.

User reported a bug in which the bait iframe redirected the parent page
to the src. This is probably particular to the person's site, and not
common, but implemented a fix anyway. The iframe is now sandboxed (or,
in old IE, given restricted security) to prevent frame busting.
increment version