This table shows how creatives are rendered:

Creative type Placement type Trusted advertiser DOM
IFRAME IFRAME No
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx" sandbox="...">
      <iframe src="creative url></iframe>
    </iframe>
  </iframe>
</body>
IFRAME IFRAME Yes
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx" sandbox="...">
      <iframe src="creative URL></iframe>
    </iframe>
  </iframe>
</body>
IFRAME Javascript No
<body location="publisher url">
  <iframe src="javascript:..." sandbox="...">
    <iframe src="creative URL></iframe>
  </iframe>
</body>
IFRAME Javascript Yes
<body location="publisher url">
  <iframe src="creative URL></iframe>
</body>
IFRAME Pop No
<window location="p.ato.mx">
  <iframe src="creative url></iframe>
</window>
IFRAME Pop Yes
<window location="p.ato.mx">
  <iframe src="creative url></iframe>
</window>
Javascript IFRAME No
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx">
      <script>
        creative javascript
      </script>
    </iframe>
  </iframe>
</body>
Javascript IFRAME Yes
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx">
      <script>
        creative javascript
      </script>
    </iframe>
  </iframe>
</body>
Javascript Javascript No
<body location="publisher url">
  <iframe src="javascript:...">
    <script>
      creative javascript
    </script>
  </iframe>
</body>
Javascript Javascript Yes
<body location="publisher url">
  <script>
    creative javascript
  </script>
</body>
Javascript Pop No
<window location="p.ato.mx">
  <script>
    creative javascript
  </script>
</window>
Javascript Pop Yes
<window location="p.ato.mx">
  <script>
    creative javascript
  </script>
</window>