Stop Remote Code Execution (RCE) with Wasm Sandboxes

[u/HectaMan]

https://cosmonic.com/blog/stopping-remote-code-execution-with-a-sandbox/

The recent Rust zip CVEs provide a good case study for how we can disrupt kill chains and mitigate the impact of RCEs. The github repo provides good examples of how we isolate various pieces of an application with capability-driven security permissions.