Magic conditional and math handling

I do some replacing to turn the Facer string into a valid javascript string, and then just eval() it

Its terrible, yes, but I kinda limit the desctruction possible by using with(scope).

I need to figure out some sort of security for that, otherwise it would be sooo simple to set a position to be something like
    (alert("uh oh")) and xss

    good thing this site doesnt need to be secure, mirite?