I should NOT be opened by a sandboxed iframe via any method