13.1 No malicious code in custom code

Verify all malicious activity is adequately sandboxed, containerized or isolated to delay and deter attackers from attacking other applications.

Levels: 3