The left iframe has the same domain as the caller HTML sandbox, while the iframe at the right loads content from an external domain. Notice how smt can access the same-domain iframe and change its background color (to yellow), but fails accessing the properties of the other iframe.
same domain (ok)
different domain (fail)
Wait 10 seconds and then a button will appear under this text