Use resources from the original origin in pad2

www/common/sframe-boot.js

@@ -1,6 +1,16 @@
 // Stage 0, this gets cached which means we can't change it. boot2-sframe.js is changable.
 // Note that this file is meant to be executed only inside of a sandbox iframe.
 ;(function () {
+var req = JSON.parse(decodeURIComponent(window.location.hash.substring(1)));
+if (req.cfg) { require.config(req.cfg); }
+if (req.pfx) {
+    require.config({
+        onNodeCreated: function (node, config, module, path) {
+            node.setAttribute('src', req.pfx + node.getAttribute('src'));
+        }
+    });
+}
+if (req.req) { require(req.req, function () { }); }
 window.addEventListener('message', function (msg) {
     var data = JSON.parse(msg.data);
     if (data.q !== 'INIT') { return; }
@@ -8,7 +18,4 @@ window.addEventListener('message', function (msg) {
     if (data.content && data.content.requireConf) { require.config(data.content.requireConf); }
     require(['/common/sframe-boot2.js'], function () { });
 });
-var req = JSON.parse(decodeURIComponent(window.location.hash.substring(1)));
-if (req.cfg) { require.config(req.cfg); }
-if (req.req) { require(req.req, function () { }); }
 }());

www/pad2/outer.js

@@ -8,6 +8,7 @@ define([
         var req = {
             cfg: RequireConfig,
             req: [ '/common/loading.js' ],
+            pfx: window.location.origin
         };
         $('#sbox-iframe').attr('src',
             ApiConfig.httpSafeOrigin + '/pad2/inner.html?' + ApiConfig.requireConf.urlArgs +