detecting unsafe scripts - for, while, eval, throw