v2.0.3

Changed

• Switch from srcdoc to data: URI: srcdoc inherits the parent page's CSP (per spec), which can block external scripts from ad networks. data: URIs create an opaque origin with no inherited CSP, allowing ad scripts to load resources freely.
• Simplified sandbox: Reduced to allow-scripts allow-popups.