I am sandboxed with 'allow-scripts'