So , the maximum you can get from it is the console log text return of the script you paste there. right? Or you can glue your script with anything like webgl or canvas there to do anything?
I imagine that is some sort of intentional sandboxing? I didn't know about that and find myself surprised. In principal I'm not sure why it wouldn't be able to provide direct DOM access. I'd love to hear more background on this if you know it.