detect whether browser supports iframe.sandbox and allow iframes accordingly; allow object and embed elements