This is basically the inverse of Caja. Caja lets you safely run untrusted code in your app. Defensive JavaScript lets you run your code which contains secrets

This is basically the inverse of Caja. Caja lets you safely run untrusted code in your app. Defensive JavaScript lets you run your code which contains secrets in an untrusted app (assuming you're able to load the code without the app seeing it somehow)