Iframe Sandbox Security Cheat Sheet and test cases