An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Mae modd i iframe sydd ag allow-scripts ac allow-same-origin i'w briodweddau sandbox fedru tynnu ei sandbox.