ControlView is the mechanism which TiddlySpace employs to prevent the serving of content from other spaces which would otherwise available via recipes and bags sharing the same TiddlyWeb instance.
Without ControlView, it would be possible to construct a URI to serve content from
Without ControlView, it would be possible to construct a URI to serve content from
evilspace which appeared to belong to the goodspace domain, for example: http://goodspace.tiddlyspace.com/recipes/evilspace_public/tiddlers/all_good_is_evil this is compounded by the ability for a TiddlySpace to be served by their Own Domain.