Always run third party code inside a sandbox