JS_ARG here is coming from the user - `:cp [search term]` would be typed interactively into our iframe which pages don't have access to. Tridactyl provides a `

JS_ARG here is coming from the user - `:cp [search term]` would be typed interactively into our iframe which pages don't have access to. Tridactyl provides a `:shellescape` function for sanitising untrusted input but I don't think it is needed in this case.