patch for #1604

security bugs require radical fixes, that disable features in the sandbox