A script sandbox is a restricted execution environment that limits what untrusted code can access or change. It is used to run client-generated scripts, expressions, or plugins while preventing direct access to sensitive files, system commands, secrets, or privileged application objects.
In cyber security, sandboxes are important because they help separate untrusted input from trusted logic. If the boundary holds, a malicious script may be able to compute a result but not escape into the wider system. If the boundary fails, attackers can turn a scripting flaw into code execution, data theft, workflow tampering, or access to connected services. Defenders look for sandbox escapes, code injection paths, and missing validation around script evaluation, then reduce risk with patching, least privilege, logging, and strict controls on what the sandbox can call or import.