Script execution in sandbox="allow-scripts" iframe