Inert sandbox host accepted
The data-percent context proof reached the sandbox host.
The frame has an empty HTML sandbox token set: it cannot run scripts, submit forms, retain same-origin authority, open popups, or navigate the top-level page. Its response also denies network, image, object, style, and script loads.
Measurement marker: ARN-BOUNDARY-XSS-CONTEXT-DATA-PERCENT-SANDBOX