"another sandbox escape"

"sandbox escape or you didn't really box the sand to begin with?"

"... they were restricted to contacting specific domain names but had write access to their own /etc/hosts"