diff --git a/app/src/main/assets/java_sandbox.policy b/app/src/main/assets/java_sandbox.policy
new file mode 100644
index 000000000..7ee2a1fd6
--- /dev/null
+++ b/app/src/main/assets/java_sandbox.policy
@@ -0,0 +1,12 @@
+// PojavLauncher JRE Sandbox
+// DO NOT EDIT THIS FILE WITHOUT KNOWLEDGE!
+// This file is important to protect you against viruses/malwares that could be come from unknown Java Programs (run on mod install) or a mod.
+
+grant {
+    permission java.io.FilePermission "${pojav.path.cache}/*", "read, write, delete";
+    permission java.io.FilePermission "${pojav.path.minecraft}/*", "read, write, delete";
+};
+
+deny {
+    permission java.io.FilePermission "<<ALL FILES>>", "write, delete, execute"
+}
\ No newline at end of file