I am not sandboxed directly, but opened from a sandboxed document with at least 'allow-scripts allow-popups allow-forms allow-same-origin'
First name:
Last name: