use sandbox-iframeproxy instead - this one was a first draft and that one's farther along.