[whatwg] Which vulnerabilities in HTML4 are (partially) solved in HTML5

[zhao Matt]

I saw the iframe element adds the attribute 'sandbox' in HTML5, which can
better protect users from malicious content.
so I want to know whether or not there are other changes,  HTML5 can
(partially) solve some vulnerabilities in HTML4 ?
thanks.