hbi99/test.html

## test.html
<html>
<head>
<title>3rd party script executed in sandbox mode</title>
<script type="text/javascript">

var code = 'console.log(this);'+
            'console.log(window);'+
            'console.log(document);'+
            'console.log(console);'+
            'setTimeout(function() {console.log(1);}, 10);'+
            'eval("console.log(123)");';

// sandbox container
(function(code) {
    var sys = {
        log: function(str) {
            console.log('sys >', str);
        }
    };
    code = 'var window=undefined, document=undefined;'+ code;
    (new Function('console', code).call({}, sys));
})(code);

</script>
</head>
<body>

</body>
</html>
	<html>
	<head>
	<title>3rd party script executed in sandbox mode</title>
	<script type="text/javascript">

	var code = 'console.log(this);'+
	'console.log(window);'+
	'console.log(document);'+
	'console.log(console);'+
	'setTimeout(function() {console.log(1);}, 10);'+
	'eval("console.log(123)");';

	// sandbox container
	(function(code) {
	var sys = {
	log: function(str) {
	console.log('sys >', str);
	}
	};
	code = 'var window=undefined, document=undefined;'+ code;
	(new Function('console', code).call({}, sys));
	})(code);

	</script>
	</head>
	<body>

	</body>
	</html>