@auraz The 'sandbox' attribute was added rather recently to the iframe HTML tag. It lets you decide exactly what privileges you accord to the iframe's content. And plugins for example will never load:

http://www.html5rocks.com/en/tutorials/security/sandboxed-iframes/