tl;dr: is it possible to embed a website as it was sandboxed, without knowing there is something above? I embed a website which is calling window.top so it
window.top