Marketing Feature Code

Enterprise-grade security

Network Firewall with Credentials Brokering

Control egress traffic with fine-grained network policies that can be updated at runtime. Credentials brokering injects secrets into outbound requests without exposing them inside the sandbox, preventing data exfiltration even when running untrusted code.

Dynamic policies: allow-all, deny-all, or user-defined rules

Credentials injected on egress: never enter sandbox scope

Domain-based allowlists with wildcard support

Live policy updates without restarting processes

const sandbox = await Sandbox.create({
	network: {
	policy: 'allow-all',
	},
});
// Install dependencies with full network access
await sandbox.runCommand({ cmd: 'npm', args: ['install'] });
// Lock down network before running untrusted code
await sandbox.setNetworkPolicy({
	policy: 'user-defined',
	allowedDomains: ['api.openai.com', '*.vercel.app'],
	// Credentials injected on egress - never in sandbox
	transformations: [{
		domain: 'api.openai.com',
		headers: { Authorization: 'Bearer $OPENAI_API_KEY' },
	}],
});

Installation


pnpm dlx shadcn@latest add https://cult-ui.com/r/marketing-feature-code.json