normal:
<iframe src="iframe.html"></iframe>
sandbox:
<iframe src="iframe.html" sandbox="allow-scripts allow-same-origin allow-modals allow-popups"></iframe>