An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Yiwen n iframe igebren allow-scripts akked allow-same-origin n imyerr ines sandbox izmer ad yettwakkes seg uskar bac à sable.