Quick answer
Your code stays contained
User code runs in a restricted opaque-origin iframe with network access, forms, popups, downloads, and top-level navigation blocked.
Frequently asked questions
Can preview code reach the playground page?
No. The iframe does not receive same-origin access.
Does the sandbox prove code is safe?
No. It limits browser capabilities but does not inspect or prove arbitrary code safe.