Add Sandbox Option to HTML5 Embed

This is important because some PCI compliance providers require the sandbox attribute to be set.