jsandbox
    .eval({
      code    : "x=1;Math.round(Math.pow(input, ++x))",
      input   : 36.565010597564445,
      callback: function(n) {
          console.log("number: ", n); // number: 1337
      }
  }).eval({
      code   : "][];.]\\ (*# ($(! ~",
      onerror: function(ex) {
          console.log("syntax error: ", ex); // syntax error: [error object]
      }
  }).eval({
      code    : '"foo"+input',
      input   : "bar",
      callback: function(str) {
          console.log("string: ", str); // string: foobar
      }
  }).eval({
      code    : "({q:1, w:2})",
      callback: function(obj) {
          console.log("object: ", obj); // object: object q=1 w=2
      }
  }).eval({
      code    : "[1, 2, 3].concat(input)",
      input   : [4, 5, 6],
      callback: function(arr) {
          console.log("array: ", arr); // array: [1, 2, 3, 4, 5, 6]
      }
  }).eval({
      code    : "function x(z){this.y=z;};new x(input)",
      input   : 4,
      callback: function(x) {
          console.log("new x: ", x); // new x: object y=4
      }
  });

/*
* jsandbox JavaScript Library v0.1
* 2009-06-22
* By Elijah Grey, http://eligrey.com
*
* License: GNU GPL v3 and the X11/MIT license
*   See http://eligrey.com/blog/about/license
*/
 
if (typeof document == "undefined") // loaded as a worker
	this.onmessage = function (event) { // recieved code
		var data = event.data;
 
		if (typeof data.code != "string")
			throw new TypeError("code is not a string");
 
		postMessage((function() {
			with({ // block access to XMLHttpRequest, importScripts, and postMessage for the sandboxed code
				window        : this, // provide a window object for compatibility with code that may use it
				self          : this,
				input         : this.input,
 
				importScripts : undefined,
				postMessage   : undefined,
				XMLHttpRequest: undefined,
 
				arguments     : undefined // dereference this function
			})
				return eval("with({data:undefined}){eval("+JSON.stringify(data.code)+")}"); // dereference data object and eval data.code
				// the above line must be hand-minified if you minified the name of the data object
		}).call({input: data.input}));
	}; // you should terminate this worker now as it may have been tainted with new globals
 
else (function() { // loaded in a document
 
	var jsandbox = function(uri) { // pass a uri to set file uri
		if (uri)
			jsandbox.uri = uri;
 
		return jsandbox;
	},
	scriptNode = document.getElementById("jsandbox");
 
	if (scriptNode && scriptNode.nodeName.toUpperCase() === "SCRIPT" && scriptNode.hasAttribute("src")) // jsandbox element is an external script
		jsandbox.uri = scriptNode.getAttribute("src");
 
	else // create an error to get the file URI
		try {
			throw new Error();
		} catch (e) {
			if ("fileName" in e)
				jsandbox.uri = e.fileName;
		}
 
 
	jsandbox.eval = function(options) {
	/* options parameters:
	[REQUIRED]  code     : Code to eval().
	[OPTIONAL]  input    : Input available to the code.
	[OPTIONAL]  callback : Callback to pass the return value of the eval() if no exceptions were thrown.
	[OPTIONAL]  onerror  : Callback to pass an exception if one is thrown opon eval()ing the code.
	[OPTIONAL]  uri      : URI of worker script. Defaults to jsandbox.uri.
	*/
		var worker = new Worker(options.uri||jsandbox.uri),
		request    = { // request object
			code: options.code
		};
 
		if ("input" in options)
			request.input = options.input;
 
		worker.onmessage = function(event) {
			worker.terminate();
 
			if (typeof options.callback == "function")
				options.callback(event.data);
		};
		worker.onerror = function(e) {
			worker.terminate();
 
			if (typeof options.onerror == "function")
				options.onerror(e);
		};
 
		worker.postMessage(request); // send the request object
 
		return jsandbox;
	};
 
	this.jsandbox = jsandbox;
}).call(this);