feature: Wiki worker sandbox

[linonetwo]

Description 描述

As suggested in GHSA-9hc2-hjx8-q6pv
I should add more sandbox feature by default to interstep harmful system feature requests from the wiki worker. Everything should be limited to the wiki folder by default. Plugin could do anything in the wiki folder, but can't do anything outside the folder silently.

Additional Context 额外上下文

I thought of adding sandbox feature in the upstream tiddlywik core-server, Perhaps the sandbox feature can only be done outside of it. It needs its environment runtime to provide limitation.

@Jermolene

[Jermolene]

Hi @linonetwo that is interesting. My first reaction is that the vulnerability is started by a user importing a malicious wiki. It’s very hard to defend properly against that risk, so I’m not sure whether it’s worth trying to fix specific paths like this.