Add sandboxing to the iframe