This does exist for iframes: http://www.html5rocks.com/en/tutorials/security/sandboxed-iframes/ http://www.html5rocks.com/en/tutorials/security/sandboxed-if...

This does exist for iframes: http://www.html5rocks.com/en/tutorials/security/sandboxed-iframes/ http://www.html5rocks.com/en/tutorials/security/sandboxed-if... The sandbox attribute can contain any of these values: allow-forms allows form submission. allow-popups allows (shock!) popups. allow-pointer-lock allows (surprise!) pointer lock. allow-same-origin allows the document to maintain its origin; pages loaded from https://example.com/ https://example.com/ will retain access to that origin’s data. allow-scripts allows JavaScript execution, and also allows features to trigger automatically (as they’d be trivial to implement via JavaScript). allow-top-navigation allows the document to break out of the frame by navigating the top-level window.