Security considerations of running arbitrary javascript

[gmvi]

Javascript Boop scripts shoud not have arbitrary access to the internet, and should have no access to the filesystem. This needs to be tested adequately.