<!DOCTYPE html>
<html lang="en-US">
<body>
<h2>iframe allow Same Origin</h2>
<iframe src="/test/same-origin" sandbox="allow-same-origin allow-scripts">
<p>Your browser does not support iframes.</p>
</iframe>
<h2>iframe restrict all</h2>
<iframe src="/test/same-origin" sandbox="">
<p>Your browser does not support iframes.</p>
</iframe>
</body>
</html>