oasis.js. A lightweight library for embedding untrusted content and exposing capabilities. I guess it does two things? But it does them well.