Exacerbating Cross-Site Scripting: The Iframe Sandwich