Blocks run inside sandbox="allow-scripts" without cookies, local storage, or parent DOM access.
sandbox="allow-scripts"