iframe sandbox testing

here's a sandbox

target