I am sandboxed but with only inline "allow-scripts"