With the browser sandbox gone, it will be a good test of faith. Here's to an RCE-free port