Use sandbox when embedding stuff in iframe

I made some order in code regarding embedding third party sites in iframe. We use sandbox whenever it's possible, with required "allows". The code has been tested manually by inserting the contents of file src/app/components/elements/EmbeddedPlayers/example-players.md into markdown editor on page.