An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Un iframe que tien tanto allow-scripts como allow-same-origin en o suyo atributo sandbox puede sacar o suyo sandboxing.