An interesting problem is that even if you sandbox everything perfectly, you still need to get accurate information out of the sandbox. If a sandboxed parser wa

An interesting problem is that even if you sandbox everything perfectly, you still need to get accurate information out of the sandbox. If a sandboxed parser was compromised, you still can't trust that it reported true information to you. Sandbox prevents malicious code from escaping, but not from lying to you.