payment-widget: fix NaCl bundle + harden against XSS/callback/iframe#143

liu971227-sys wants to merge 1 commit intoScottcjn:masterScottcjn/Rustchain:masterfrom

liu971227-sys:bounty/payment-widget-securityliu971227-sys/Rustchain:bounty/payment-widget-securityCopy head branch name to clipboard