Untusted code : Code obtained from an unknown entity that can potentially cause some harm when executed. Untrusted code may not always be malicious but this is usually hard to determine automatically. Untrusted code should be run in a sandboxed environment.