Audit App Cache for third party isolation
With a quick glance at the implementation (yet another separate SQL table), it looks like the App Cache is not going to obey our third party isolation. Also, this test site uses appcache in an iframe, but from the same origin: http://www.stevesouders.com/blog/2012/09/10/clearing-browser-data/