If this page looks styled and clean, inline CSS works.
Counter: 0
If clicking increments the counter, allow-scripts works.
The next button tries to access window.parent:
Click to test.
Tries to fetch from a remote URL (should fail due to no allow-same-origin):
Click to test.
| Feature | Status |
|---|---|
| Inline CSS | Working |
| Inline JS | Working |
| Sandbox isolation | Active |
Script did not run.