Can I use
?

sandbox attribute for iframes

- LS

Method of running external site pages with reduced privileges (e.g. no JavaScript) in iframes.

Chrome

  1. ❌ 4: Not supported
  2. ✅ 5 - 137: Supported
  3. ✅ 138: Supported
  4. ✅ 139 - 141: Supported

Edge

  1. ✅ 12 - 137: Supported
  2. ✅ 138: Supported

Safari

  1. ❌ 3.1 - 4: Not supported
  2. ✅ 5 - 18.4: Supported
  3. ✅ 18.5: Supported
  4. ✅ 26.0 - TP: Supported

Firefox

  1. ❌ 2 - 16: Not supported
  2. ◐ 17 - 27: Partial support
  3. ✅ 28 - 139: Supported
  4. ✅ 140: Supported
  5. ✅ 141 - 143: Supported

Opera

  1. ❌ 9 - 12.1: Not supported
  2. ✅ 15 - 116: Supported
  3. ✅ 117: Supported

IE

  1. ❌ 5.5 - 9: Not supported
  2. ✅ 10: Supported
  3. ✅ 11: Supported

Chrome for Android

  1. ✅ 138: Supported

Safari on iOS

  1. ❌ 3.2: Not supported
  2. ✅ 4 - 18.4: Supported
  3. ✅ 18.5: Supported
  4. ✅ 26.0: Supported

Samsung Internet

  1. ✅ 4 - 27: Supported
  2. ✅ 28: Supported

Opera Mini

  1. ❌ all: Not supported

Opera Mobile

  1. ❌ 10 - 12.1: Not supported
  2. ✅ 80: Supported

UC Browser for Android

  1. ✅ 15.5: Supported

Android Browser

  1. ❌ 2.1: Not supported
  2. ✅ 2.2 - 4.4.4: Supported
  3. ✅ 138: Supported

Firefox for Android

  1. ✅ 140: Supported

QQ Browser

  1. ✅ 14.9: Supported

Baidu Browser

  1. ✅ 13.52: Supported

KaiOS Browser

  1. ✅ 2.5: Supported
  2. ✅ 3: Supported
Resources:
Chromium blog article
MSDN article
WebPlatform Docs