We may even need something stronger than docker. There are various project to use virtualization technology to sandbox a browser session at the hardware level. My guess is that ultimately this is the future of web browser.