remove sandboxing entirely from iframe