sandbox to execute js scripts