The embeddable Softphone widget on a test page. The page around it can use hostile global CSS (switch below) to show the widget is isolated. The account you enter is kept in this browser's localStorage only and sent nowhere but the SIP server you enter.