• Makefile
• creative.html
• inabox-creative.html
• prepare-test.py
• generated file listing

Summary

• The page initiates the ad request by adding <script type=webbundle></script> to the DOM. The page includes a UUID on the request, and uses the UUID to add a script to the DOM which will be fufilled by the bundle.
• When the bundle comes back, the script executes.
• The script operates in the context of the publisher page, adds iframes to the DOM, and sets the source of these iframes to creatives inside the bundle.
• Because the creatives have opaque uuid-in-package: origins the origins are unique.