Does anyone else remember when Flash could execute arbitrary Javascript in the containing page? That was super fun.

Attempting to sandbox user-supplied Javascript just seems like an exercise in futility.

You just need to run the javascript in a interpreter written in javascript /sarcasm

>> EDIT: oh god it's real https://github.com/mozilla/narcissus