Hacker News Reader

For obvious reasons chromium has pretty extensive sandboxing. You can read the source right here: https://source.chromium.org/chromium/chromium/src/+/main:con...

Here's a more informative doc about sandboxing in Chromium

Looks like that's the subset of their sandbox that applies to GPUs, the file is content/gpu/gpu_main.cc