In this commit we switched the sandbox strategy to use iframe's sandbox attribute. Indeed we do not need delegate event anymore, but need to add some styles into the iframe. The details were documented in the sandbox part of internal design.
