Defense in depth + defense in breadth - aka. all of the above
replysandbox escapes have been the rage recently
Not firecracker
replyplease don't jinx it
replyYeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.
replyNo, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac
reply