[rafram]

Given that this is meant to be a safe alternative to inline JS, executing arbitrary JS would be counterproductive.