Snow JS gets a callback and passes to it every new iframe/realm that is born in the web app, thus preventing attackers from maliciously abusing iframes to attack the app