@pcalkins only code outside the sanbox is an http client (axios, to be precise), which supposedly isn't too vulnerable. And, thinking of your earlier comments, i won't be able to implement any whitelist system, since my http client searches for random hosts and passes any discovered pages to an inspecting system. My perceived problem is that if any of those pages contain phishing, hooks or any other malicious javascript targetting browsers, my system will fall victim to them, since this javascript will be executed.
