Running sandboxed code using vm

untrusted.js

  server.on("response", function(response) {
    fs.readFile('untrusted.js', function(err,data){
      var loaded_module = vm.createScript(data, 'untrusted.js');
      loaded_module.runInNewContext({response: response});
    })
  });

// untrusted.js

(function () {
  response.writeHead(200, {'Content-Type': 'text/plain'});
  response.end('Hello World\n');
})();