Sandboxing is the practice of running a program inside a sealed-off space where it can work freely but can't reach anything outside.