working css embed with sandboxing