This does not exactly solve the concern of executing random code from online, but FWIW the decoded base64 blob is easy to vet as a trivial HTML page.