An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Un iframe que ten allow-scripts e allow-same-origin para o seu atributo sandbox pode retirar o mecanismo de sandbox.