ONEBOX IFRAME BYPASS — x.kaltura.com.ipwnedyour.net
sandbox: allow-scripts ✓ allow-popups ✓ allow-popups-to-escape-sandbox ✓ allow-modals ✗
1. Try prompt() directly (should be blocked)
2. Open unsandboxed popup → prompt()