always keep whitelisted iframes
if api permits it, keep whitelisted iframe tags even if browser won't
support the sandbox attribute. all other iframes are purged by this
plugin in this case.
version bump