An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Bere sandbox atributuan bai allow-scripts bai eta allow-same-origin dituen iframe batek bere sanboxing-a ken dezake.