# Sandboxing

> A technique for running untrusted code with only the resources and permissions it is granted.

Record: `lexicon:sandboxing`
Kind: technique
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-sandboxing

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Default Deny](https://banes-lab.com/records/lexicon/default-deny.md) and before [Network Segmentation](https://banes-lab.com/records/lexicon/network-segmentation.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Refactors

- [Runtime Code Generation](https://banes-lab.com/records/architecture/runtime-code-generation.md)

## Linked from

- [Metaprogramming / Language-Oriented Architecture](https://banes-lab.com/ontology/principles/architecture-category-metaprogramming-language-oriented-architecture.md)