Running web content in a separate environment from the user's device so that malicious code cannot reach it.