http://code.google.com/p/google-caja/ http://code.google.com/p/google-caja/ It's not an iframe, it's a capability-based filter which provides more security tha

http://code.google.com/p/google-caja/ http://code.google.com/p/google-caja/ It's not an iframe, it's a capability-based filter which provides more security than an iframe can. A lot of sites use it now that it's reasonably fast...