A big, interesting project, aims to ensure that a fully-pwned render process cannot attack arbitrary sites. Video