Well, it's not sure it will be internal forever. Who knows how promdash will be used later. My suggestion was mainly to not allow any javascript function by using `eval`, as sophisticated people might find a way to use them as a way to store a persisted XSS attack. I don't have an opinion on how the implementation should look like.