Release 2.0.0

[weizman]

EDIT: THIS VERSION HAS BEEN DEPRECATED - READ MORE @ #133 AND SEE FIX RELEASE @ #134

• non breaking Parsing html with template element misses on framesets #75
• non breaking Add support for documentPictureInPicture.requestWindow (new chrome feature) #79
• non breaking Child frames are overlooked inside opened windows #84
• breaking Improve Blob/File/MediaSource handling #88
• non breaking Attempt to solve snow clash when snow protected page opens itself #97
• non breaking Fix vulnerability in chromium bug workaround #99
• non breaking Detect trusted HTMLs more safely #102
• non breaking Hook inserter Range insertNode #103
• non breaking 443eb1f
• non breaking dd9d85b
• breaking Fix Blob and URL creation behaviour #105
• non breaking Implement is-cross-origin internally so it doesn't throw #111
• breaking Forbid srcdoc frames with inner CSP meta tag #104 (with e2cf42e)
• non breaking Fix object proto pollution #113
• non breaking Fix EventTarget prototype abuse vulnerability #115
• non breaking Handle new doc static iframes (e.g. in srcdoc) #101
• non breaking Fix clash when Snow loads in same origin realm and is also called within it (continue #97) #121
• breaking Enforce Snow integration with CSP #118
• non breaking Fix for mXSS bypass #123
• non breaking Allow iframes to use top.SNOW properly #124
• non breaking Fix for JS URI based bypasses #125
• non breaking Fix multiple document.write calls #126
• non breaking Improper hook of document.open #127
• non breaking Harden Snow iframes clashing and protection #128

Decided breaking mostly around #118 where Snow now expects some level of CSP integration in order to function where before it did not.