XSS in sandbox domains - Invalid Reports - Learn - Google Bug HuntersGoogle uses a range of sandbox domains to safely host various types of user-generated content ... googleusercontent.com; *.googlecode.com; *.codespot.