The sandbox API and web applications