Sandboxing Browser AI Agents