Policy based blocking of vulnerable code ()