In computer security, a sandbox is a security mechanism for separating running programs, usually in an effort to mitigate system failures or software vulnerabilities from spreading. 目的:在程序超出预期时,降低破坏范围. A sandbox typically provides a tightly controlle