[moonchild]

Don't [i]frames solve this problem? They can use scripts, sure, but those scripts are contained and cannot reach outside their box.

[robin_reala]

A quick sandbox attribute and the scripts will be disabled: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if...