Actually the drag-drop isn't as big of a deal as cross-domain message passing. We'll likely end up having to use a flash fallback or similar, but last night as we were hacking on this we decided to punt for a day or two