```new Function()``` is JavaScript's way to build functions from strings. The format is "new Function("param1name", "param2name", "...", "function body") so in this case it basically acts as if we wrote:

```
cfn = function() {
  var config = {...}; // "config = {...};" comes from someone's HTML
  ; // just in case someone forgot the semi colon
  return config;
};
```
However, unlike ```eval```, using ```new Function``` will fail in extremely useful ways. First off, if your code has syntax errors, the constructor will throw a syntax error. Second, any "var" statements are function-scoped, instead of global scoped, so there's less chance of collisions. Third, because everything is function wrapped we need to call that function, which gives us a second level of error handling, in case the code is syntactically correct but actually bugged/broken. In that case, the function will generate a runtime error, like any other function. It's basically everything eval should have been, but isn't, and makes importing code far less of a "don't use eval!" and much more of a "if you handle the exceptions, and validate your input, this is perfectly sensible" approach.