[Chartjs]-Iframes without sandbox attribute is a Vulnerability

Chart.js stopped using iframe in version 2.7.0 (released almost 2 years ago at time of writing).

Upgrade your version of Chart.js to at least 2.7.0 to mitigate the problem.