An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Iframe, kotryž ma allow-scripts kaž tež allow-same-origin za swój atribut sandbox, móže wužiwanje w pěskowym kašćiku wotstronić.