title: Strange cross-domain issue with iframe
body: <p>I am using the <code>iframe</code> below inside a different domain, however somehow the parent window is redirected both in Chrome and Firefox. Isn't this supposed to be blocked due to cross-domain policy?</p>
  
  <p>I can block it by adding the <code>sandbox=""</code> attribute to the <code>iframe</code>, however I am still curious why this is possible.</p>
  
  <pre><code>&lt;html&gt;
  &lt;body&gt;
  &lt;iframe src="http://www.samplicio.us/router/default.aspx?SID=0db760c8-4858-4773-9e67-ca7e2cdb3cba&amp;PID=7525e17a-a799-416c-bf84-4ea2e75ac332&amp;AGE=24&amp;GENDER=1&amp;HISPANIC=1&amp;ETHNICITY=1&amp;STANDARD_HHI_US=3" /&gt;
  &lt;/body&gt;
  &lt;/html&gt;
  </code></pre>