Mitigating Privilege Escalation in Plugins

Sandbox third-party extensions using filesystem namespace restrictions and capability filtering.