This is a relatively obscure feature of Tcl, but it has some great ideas on how to safely execute user-supplied scripts in a sandbox.

Pretty cool.

http://www.tcl.tk/man/tcl8.5/TclCmd/interp.htm