# Simon Willison - Introducing Deno Sandbox (Highlights)  ## Highlights - Outbound API calls to `api.openai.com` run through a proxy which is aware of those placeholders and replaces them with the original secret. In this way the secret itself is not available to code within the sandbox, which limits the ability for malicious code (e.g. from a prompt injection) to exfiltrate those secrets. ([View Highlight](https://read.readwise.io/read/01kgmr3jp70wgwhngy07fky12y)) ^984971383