Fix ReadKit iframes

Apparently the latest ReadKit/Safari version does not like an iframe
sandbox without allow-same-origin.