Some extra checks to help prevent misuse of DOM apis in the insecure/buggy angular expressions

I didn't see you comment until after I merged this.  I'll address both points in a future commit.  Thanks for taking a look!