> One might envision some language environment that can track taint-style the flow of data through an application, but this seems beyond state-of-the-art. Worl

> One might envision some language environment that can track taint-style the flow of data through an application, but this seems beyond state-of-the-art. World of Warcraft has had this in its addon system for over 15 years: https://wowpedia.fandom.com/wiki/Secure_Execution_and_Tainting https://wowpedia.fandom.com/wiki/Secure_Execution_and_Tainti... . It completely controls the language (embedded Lua) and execution environment though.