Sandbox untrusted ReactJS components on a Page