A sandboxed iframe with 'allow-same-origin allow-scripts'

An unsandboxed iframe