Behavior is the same whether sandboxed or not
First iframe is fully sandboxed
Second iframe has sandbox="allow-scripts"