HTML · Security · Junior · Concept
What does the sandbox attribute on iframes do?
Short Interview Answer
Restricts iframe capabilities (scripts, forms, top-nav) via allow-flags.
Detailed Explanation
Default sandbox is strict. Add permissions sparingly. Combine with CSP where possible.