title: How to Secure Twitter Widget Iframe
body: <p>I am using Netsparker to security scan my site and it has flagged an issue regarding an Insecure Frame which has been generated using the Twitter Widget JS code supplied by them.</p>
  
  <p>The code supplied is:</p>
  
  <pre><code> &lt;div class="twitter-timeline"&gt; 
       &lt;div class="twitter-timeline__heading"&gt; 
         &lt;h2&gt;Twitter&lt;/h2&gt; 
       &lt;/div&gt;
       &lt;a class="twitter-timeline" data-lang="en" data- 
          height="400" href="https://twitter.com/XXXXX? 
          ref_src=xxxxxxx"&gt;Tweets 
          by XXXXX
      &lt;/a&gt; 
       &lt;script async src="https://platform.twitter.com/widgets.js" 
       charset="utf-8"&gt;&lt;/script&gt; 
   &lt;/div&gt;
  </code></pre>
  
  <p>As a remedy it suggests adding Sandbox to the IFrame tag but of course this is generated by the script above.</p>
  
  <p>Any ideas? </p>