it wouldn't be such a big deal if accidentally poisoning it with JavaScript wasn't so dang dangerous
77 years since Von Neumann, and we're still stuck holding our instructions in the data
77 years since Von Neumann, and we're still stuck holding our instructions in the data
That said, even if that existed, there'd still probably be some dangers you'd have to be careful to avoid.
iframe sandbox with srcdoc? Not so elegant, but it works. [Alternatively, iframe to another document and use CSP header there to ban everything]