An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can remove its sandboxing.
Iframe, kótaryž ma ako allow-scripts tak teke allow-same-origin za swój atribut sandbox, móžo wužywanje w pěskowem kašćiku wótpóraś.