An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Un iframe que conté tant «allow-scripts» com «allow-same-origin» en l'atribut «sandbox» pot eliminar el seu entorn de proves.