Have you considered adding a capability for plugins to draw HTML into an <iframe sandbox>? I'm always pondering such features, but I'm wary of letting a plugin potentially block the CPU forever with custom <script> elements. I have a solution to plugin CPU blocking for pure API plugins (https://github.com/justjake/quickjs-emscripten) but not a way to meld it safely with HTML access.