See https://developer.mozilla.org/en-US/docs/Learn_web_development/Core/Stru... under the "Always use the sandbox attribute" sandbox.
Active
1.0
Code
Maybe we should make this a setting, enabled by default? So the site manager can control it.
Yeah maybe we even need a further setting for the optional contents of the attribute (just a textfield)?