Bug 31064 and others: skip letterboxing on extensions and internal pages / make it harder to bypass from web content

Fixes #31064 (closed), #32411 (closed) and #41434 (closed).