Javascript Injection at it's Finest!, without even using Eval()!

They need to make javascript only execute in scoped containers within the browser. Don't ask me how, I'm sure the browser companies can make some kinda sandbox element.