An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Iframe koji ima allow-scripts i allow-same-origin atribute za svoj atribut odvojenog pokretanja, može ukloniti svoje odvojeno pokretanje.