Huh. Could this be a way to sandbox user-generated JS in web apps?