Restrict Object prototype functions.

Discovered by @emilvirkki, it's possible for expressions to call
functions of the default object prototype. A crafty message call
can allow for arbitrary code execution.
https://github.com/joewalnes/filtrex/issues/4

This fixes the issue.

Fixes #4