TLDR. That thing is a server (at least in my cases). They do not fish out and run code from some web page. They get request, they compute result and send that r

TLDR. That thing is a server (at least in my cases). They do not fish out and run code from some web page. They get request, they compute result and send that result back. Enough already of that scaring everyone into the "safe environment and languages"