Merge remote-tracking branch 'origin/MAGETWO-92169' into 2.2.7-develop-pr45

Author: svitja

app/code/Magento/Newsletter/view/adminhtml/templates/preview/iframeswitcher.phtml

@@ -16,7 +16,14 @@
         </div>
         <?php endif;?>
     </div>
-    <iframe name="preview_iframe" id="preview_iframe" frameborder="0" title="<?= $block->escapeHtmlAttr(__('Preview')) ?>" width="100%"></iframe>
+    <iframe
+            name="preview_iframe"
+            id="preview_iframe"
+            frameborder="0"
+            title="<?= $block->escapeHtmlAttr(__('Preview')) ?>"
+            width="100%"
+            sandbox="allow-forms allow-pointer-lock allow-scripts">
+    </iframe>
     <?= $block->getChildHtml('preview_form') ?>
 </div>