A sandboxed web worker without eval() and assignments to global variables