Spreadsheet: safer formula evaluation