not just alert but also prompt(), confirm(), etc. And from what I can tell there's not even an option to turn them back on, like some other sandbox rules that a

not just alert but also prompt(), confirm(), etc. And from what I can tell there's not even an option to turn them back on, like some other sandbox rules that are available from iframes (not 100% certain about this but that was my takeaway skimming the relevant bug report on monorail)