A sandbox without a network boundary is only half a sandbox

Running untrusted code safely requires more than separating it from the host. You also have to control what that code can reach.

Raccontata davercel.com