What’s next in HTML: the sandbox attribute

Good stuff. Too bad you can't finely tune what is and what isn't allowed. Like disabling just window.location, etc..