Thread:Extension talk:EmbedScript/On the section "Security"

The phrase "the real sandbox page" is dificult to interpret. Is it an automatic generated page for the iframe or is it the javascript code for the iframe aka the worker code?