Safe ES5 eval() that doesn't leak globals.