HTML Code

<!DOCTYPE html>
<html lang=en>
<head>
  <meta charset=UTF-8>
  <meta name=viewport content="width=device-width,initial-scale=1">
  <title>sandbox — allow-scripts</title>
  <style>body{font-family:system-ui,sans-serif;margin:0;padding:1.5rem;background:#f8fafc;color:#334155;line-height:1.7}h1{margin:0 0 .75rem;font-size:1.25rem;color:#0f172a}h2{margin:1rem 0 .35rem;font-size:.9375rem;color:#0f172a}.compare{display:grid;gap:1rem;max-width:420px}.box{padding:.75rem 1rem;background:#fff;border:1px solid #e2e8f0;border-radius:8px}iframe{width:100%;height:72px;border:1px solid #cbd5e1;border-radius:6px;margin-top:.35rem}.label{font-size:.8125rem;color:#64748b;margin:0}</style>
</head>
<body>
  <h1>allow-scripts token</h1>

  <div class=compare>
    <div class=box>
      <p class=label>sandbox (no scripts)</p>
      <iframe sandbox title="No scripts" srcdoc="<!DOCTYPE html><html><body style='font-family:system-ui;margin:0.5rem;'><p id='a'>Before script</p><script>document.getElementById('a').textContent='Script ran';</script></body></html>"></iframe>
    </div>

    <div class=box>
      <p class=label>sandbox="allow-scripts"</p>
      <iframe sandbox=allow-scripts title="Scripts allowed" srcdoc="<!DOCTYPE html><html><body style='font-family:system-ui;margin:0.5rem;'><p id='b'>Before script</p><script>document.getElementById('b').textContent='Script ran!';</script></body></html>"></iframe>
    </div>
  </div>
</body>
</html>

Lines: 0 | Characters: 0

Live Preview Auto-refresh on Run

HTML sandbox Attribute — allow-scripts