Simple and secure Javascript expression evaluator