This table shows how creatives are rendered:

Creative type Placement type Trusted advertiser DOM
IFRAME IFRAME No
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx" sandbox="...">
      <iframe src="creative url></iframe>
    </iframe>
  </iframe>
</body>
IFRAME IFRAME Yes
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx" sandbox="...">
      <iframe src="creative URL></iframe>
    </iframe>
  </iframe>
</body>
IFRAME Javascript No
<body location="publisher url">
  <iframe src="javascript:..." sandbox="...">
    <iframe src="creative URL></iframe>
  </iframe>
</body>
IFRAME Javascript Yes
<body location="publisher url">
  <iframe src="creative URL></iframe>
</body>
IFRAME Pop No
<window location="p.ato.mx">
  <iframe src="creative url></iframe>
</window>
IFRAME Pop Yes
<window location="p.ato.mx">
  <iframe src="creative url></iframe>
</window>
Javascript IFRAME No
<body location="publisher url">
  <iframe src="s.ato.mx">
    <iframe src="p.ato.mx">
      <script>
        creative javascript
      </script>
    </iframe>
  <