I should NOT be loaded by a form submit from a sandbox without 'allow-forms'