The solution for untrusted code is to not run it.