add iframe sandbox
ensure 0 scroll pos.
Prevent navigation from preview