[2] is very similar to what I want to do. They chose to insert an iframe into the current page and I don't agree with this decision: the extension should have as little access as possible to the page, ideally it only gets a hash of the url.