Right. Access to the environment is the dangerous part, not the eval function. There's a proposal to tame the JS global environment along those lines: https://g

Right. Access to the environment is the dangerous part, not the eval function. There's a proposal to tame the JS global environment along those lines: https://github.com/tc39/proposal-frozen-realms https://github.com/tc39/proposal-frozen-realms Note however that the threat model here does not include denial of service. You have to address that at another level like OS processes or E vats.