Hmm, the iframe in which we execute users scripts is sandboxed. What jQuery does is, it creates another utility iframe **inside** our sandboxed iframe, which it uses to determine the value of an elements display property. The exception is thrown when jQuery tries to access contents of the inner iframe. 

[![boom][1]][1]

So it looks like Chrome thinks that the utility iframe should be sandboxed from its parent iframe.

Relevant w3c example: https://w3c.github.io/html/semantics.html#example-6dd42711

Setting `allow-same-origin` on our iframe would fix this, but discussing it internally, since it's [tag:status-bydesign] - https://meta.stackexchange.com/questions/239560/how-is-my-browser-protected-from-xss-in-stack-snippets/240215#240215

Stay tuned for updates.

  [1]: https://i.sstatic.net/yaR88.png