It's possible to access files behind sandbox directory with cURL module.
vulners.com/securityvulns/securityvulns:doc:18931
vulners.com/securityvulns/securityvulns:doc:21635