This page's CSP specifies a sandbox and should fail origin checks.