improvements to article: in-application-sandboxing