Normal Iframe

Sec-Fetch-Site is same-origin on Chrome/Firefox/Safari

Sandboxed Iframe

Sec-Fetch-Site is same-origin on Chrome/Firefox but cross-site on Safari