<iframe src sandbox="allow-scripts allow-same-origin"></iframe>