What is a sandbox and why does Nisus Writer adopt it?

Moderator: faq-editor

Post Reply
User avatar
Official Nisus Person
Posts: 5156
Joined: 2002-07-11 17:14:10
Location: San Diego, CA

What is a sandbox and why does Nisus Writer adopt it?

Post by martin »

Sandboxing is a system feature that enhances security on your Mac. The sandbox is enforced by the system (macOS) to prevent unauthorized access to data on your computer.

What are the risks of using an application without sandboxing?
To understand the benefits of sandboxing, it is helpful to understand the risk of running applications that are not sandboxed. Whenever you use an unsandboxed app, you are implicitly giving it permission to access almost any data on your Mac. That's true even if the app's apparent functionality is limited.

Hypothetically any unsandboxed app (eg: an icon editor) could secretly be scanning your files for tax payer information. Obviously such an app does not need that kind of access, and you shouldn't have to blindly trust that the app won't abuse its privileges. Even if an app is completely harmless and trustworthy, if it is somehow hacked or has a bug, its access to all your data could be misappropriated.

What are the benefits of sandboxing?
The sandbox prevents an application from accessing files and resources on your Mac, unless you (the user) first grant it permission. A sandboxed app cannot read any files or documents unless you first interact with them. If you choose files or folders in a system dialog, this implicitly grants the application permission to access those items. This lets you be sure that an app does not access any data without your permission. This is ultimately a security benefit.

When an application is sandboxed (like Nisus Writer Pro), you can use such an app with greater confidence.
Post Reply