Extend iframe sandbox permissions and consolidate in a single place

[GibbsConsulting]

The needed list of sandbox permissions for iframes is continually expanding; #411 is the most recent example.

The permissions themselves should be in a single place - and perhaps configurable for anyone who wishes to adjust them - and then used in each template as needed.