I have a javascript file that reads another file which may contain javascript fragments that need to be eval()-ed. The script fragments are supposed to conform to a strict s
There is a project called Google Caja. You can "sandbox" third party javascript using Caja. https://developers.google.com/caja/