Authenticode-the activex code is bundled into a single file called an activex control. activex controls can be digitally signed using microsofts authenticode technology. internet explorer can be configured to disregard any activex control that isnt signed, to run only activex controls that have been signed by specific publishers, or to accept activex controls signed by any registered software publisher. activex controls do not run in a sandbox. the burden is on the user to determine which activex controls s/he feels are safe to run.applets and cgi are alternate types of content, and a sandbox refers to a protected area of the system in which web content runs.