I am sandboxed but with "allow-popups allow-scripts allow-same-origin"