nl_tokens: Internal Dependencies Given an iframe is it okay to have it run without a sandbox?
pl_tokens: function doesNotNeedSandbox ( iframe ) { const trustedHosts = [ 'spotify.com' , 'kickstarter.com' , 'soundcloud.com' , 'embed.ted.com' , 'player.twitch.tv' , ] ; const hostName = iframe . src && url . <mask> ( iframe . src ) . hostname ; const iframeHost = hostName && hostName . toLowerCase ( ) ; return some ( trustedHosts , trustedHost => endsWith ( '.' + iframeHost , '.' + trustedHost ) ) ; }