Iframe Sandbox Policy Builder
Pick sandbox permissions and get an iframe snippet with exactly the sandbox tokens you chose.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
Iframe Sandbox Policy Builder
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
Choosing allow-scripts only produces an iframe snippet whose sandbox attribute contains just allow-scripts.
What this tool does not do / Limits
This tool only builds a text snippet. It does not load, test or verify any embedded page, and it cannot make an untrusted page safe on its own.
Frequently asked questions
Does this tool load the page I enter?
No. It only uses the address as text inside the generated snippet and never loads it.
Which tokens should I choose?
Choose the fewest tokens the embedded page needs. Leaving the list empty gives the strictest sandbox.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live