shipped by the application

provided | changeable by a user and is therefore untrusted. The code is then evaluated in a Plugin created with the Jailed library. The Plugin runs in a sandboxed iframe in order to prevent accessing the main application