[attempt at] safe eval of untrusted JavaScript source code in the browser.