Sandboxing WebKitGTK
See https://blogs.gnome.org/mcatanzaro/2020/03/31/sandboxing-webkitgtk-apps/
Should be easy, but Devhelp needs to be tested to see if there is no regression.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information