Glossary
Plugin Sandboxing
Plugin sandboxing restricts what a third-party extension can actually do within a host application or platform, rather than letting it run with the same access the host application itself has. Without this, a plugin system built purely for functional extensibility tends to grant, by default, far more access than most individual plugins actually need — a plugin that only needs to read a small piece of configuration might otherwise be able to reach anything the host process can.
Getting the boundary right requires an explicit permission model for what a plugin can access, rather than an all-or-nothing choice between full host access and no extensibility at all — and it requires the host to actually enforce that boundary at runtime, not merely document it as an expectation plugin authors are trusted to respect.