sandbox mode works for subsubdomains