One solution would be to ensure that each javascript interpreter is isolated in a process memory space where it cannot see anything it shouldn't. Basically, you

One solution would be to ensure that each javascript interpreter is isolated in a process memory space where it cannot see anything it shouldn't. Basically, you have to design the software the the understanding that anyone who can execute even "sandboxed" code in your process effectively has full read privileges over all the bytes therein.