[mnutt]

This is the use case that something like sandstorm.io tries to solve, by locking down system calls on the backend and (slowly but surely) CSP on the frontend. I don’t think BitWarden has been ported yet, though.

[foepys]

Is sandstorm active again? A few years ago there was some news about the company behind it running out of money and abandoning the project if I remember correctly.

[mnutt]

It transitioned to a community project and is active again. The original contributors are still involved, just to a lesser degree.