8. CWE-829 : Inclusion of Functionality from Untrusted Control Sphere
MIT-22 Run the code in a "jail" or similar sandbox environment that enforces strict boundaries between the process
and the operating system. This may effectively restrict which files can be accessed in a particular directory
or which commands can be executed by the software.