NatiSand: Native Code Sandboxing for JavaScript Runtimes