This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2 Security Update 2021-001 Catalina Security Update 2021-001 Mojave watchOS 7.3 tvOS 14.4 iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.