I'm a <frame> inside a <frame> inside an iframe which is sandboxed with 'allow-scripts allow-forms'