Sandbox a Third-Party Widget

Embed a chat widget (https://chat.example.com/widget) that needs scripts and form submission only: iframe with sandbox="allow-scripts allow-forms", a title, loading="lazy", and explicit width/height. Then, below it, embed a trusted static report from YOUR OWN origin as <iframe src="report.html" sandbox="allow-scripts allow-same-origin"> (safe because it is first-party).

Difficulty: advanced