Hacker News Reader

Controlling which tools it has access to is called sandboxing.

Not really. Take Chrome for example. It controls what javascript APIs websites have access to. Still needs separate sandboxing.