The common drawback of sandbox and whitelist mechanisms is their relatively high configuration cost and poor out-of-the-box experience, which causes many users to disable them, rendering the protections ineffective.