Code review comment for lp:~abreu-alexandre/oxide/content-script-injection-main-world

> we're adding an API that makes oxide fundamentally unsafe
exaggeration.
this api will be used only with trusted html code (embedded webview case).
+ applications will run with apparmor profile.

So It's bad reason to over complicate api.