The Sandbox Policy language is parsed by sandbox-compilerd, which embeds TinyScheme, and is sandboxed metacircularly.
This would seem to address some of the concerns about Safari that are being discussed along side the recent Black Hat conference. It was mentioned earlier that Chrome had been the only browser not to fall due to the sandbox method of thinking. Seeing as Chrome is based on webkit, it is basically "Safari in a sandbox".
Edit: My mistake - I wrote Black Hat, but it was actually Pwn2Own. Sorry for any confusion.
This is a security non-starter until Apple enables the sandboxing by default on all systems. Average users just flat out won't do this. They won't even know about it.
Yes, but I think it's safe to assume that HN readers are not average users. We can spread the word of safety :).