Feel free to remove the `allow-scripts` from the sandbox attribute. It's there to allow filtering and toggling of disabled mods for modlist.txt, but adds some insecurity.