iframe sandbox="allow-scripts allow-same-origin"