Make default iframe sandbox only require :blob csp permission

[silesky]

No description provided.

[changeset-bot]

🦋 Changeset detected

Latest commit: 0eafea4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
@segment/analytics-signals-runtime	Minor
@segment/analytics-signals	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 91.19%. Comparing base (3f15dfa) to head (0eafea4).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1290      +/-   ##
==========================================
+ Coverage   82.87%   91.19%   +8.32%     
==========================================
  Files         225      163      -62     
  Lines        6019     4383    -1636     
  Branches     1365     1052     -313     
==========================================
- Hits         4988     3997     -991     
+ Misses       1031      386     -645     

Flag	Coverage Δ
browser	92.21% <ø> (ø)
core	89.86% <ø> (ø)
node	87.93% <ø> (ø)

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.