Site-controlled content

UCC iframe: Different origin, same domain, effective origin is null

sandbox (full restrictions)