wrappers.js: must set `hasEval` to false if Function constructor threw an exception

If the `securityPolicy` test fails but `new Function()` throws an exception, we must conclude `hasEval` should be false.