Check museum display view is reasonably "sandboxed"

[onezoom]

Check museum display view is reasonably "sandboxed"

[hyanwong]

We should also

(a) describe the pros / cons to potential users of the museum display. E.g. you have all the species etc wikipedia pages in multiple languages, but we have gone some way to mitigating abuse by ensuring that users can't just display any web page on the screen. However, we can't guarantee the appropriateness of the wikipedia pages (NB: we should make a museum display with WP turned off - this is trivial), and we can't stop someone editing the WP page to include inappropriate material, then going to that page on the display (this seems unlikely, though). Trivial hacks of this sort could be partially mitigated by looking at the revisions of a page and not using revisions within e.g. the past hour, but this might be overkill for us.

(b) document the methods used somewhere, so they can be checked over. E.g. in order to avoid using iframes, the wikipedia linkouts have to do fancy stuff like inject the WP css into the existing page, which might be considered rather fragile. Other examples of methods are using html definitions like '''href="mailto:[email protected]" onclick="if (typeof sponsor_page_link == 'function') {return sponsor_page_link(this);}"''' so that we fall back to a mailto link by default, but use the function sponsor_page_link if it is available - this function can be redefined to pop up a context box pointing out that mailto links are not valid on the museum display (is this a sensible hack?).

[hyanwong]

Moved to #93, and now the functional testing does some sandbox testing too.