Added allow-scripts to iframe sandbox attribute