Good stuff. Too bad you can't finely tune what is and what isn't allowed. Like disabling just window.location, etc..