Ok, is it wrong that my first thought had nothing to do with the actual content... (from you EDIT) ... but instead immediately was like "Shit, yeah... the person on the site could open "banned" sites in an iframe remotely... like a remote controlled dog collar" ...
So yeah, i just go right to the tech... engineer life... I don't know if i love or hate the "problem" of seeing everything as a problem with a solution to be found..