如何只允许列入白名单的资源（脚本，像素等）在沙盒iframe中运行？

I am looking for an approach to allow only whitelisted scripts to run within a sandboxed iframe. I was thinking of an iframe-sandbox directive that allows only whitelisted scripts to run within an iframe. The analogy is the script-src directive in the Content Security Policy.I am looking for an approach to allow only whit