The subuser project is using Xpra to isolate and bridge the untrusted code into the trusted space. <a href="http:&#x2F;&#x2F;subuser.org&#x2F;news&#x2F;0.3.html" rel="nofollow">http:&#x2F;&#x2F;subuser.org&#x2F;news&#x2F;0.3.html</a>