google-caja – Google Code Caja (pronounced "KA-ha") is "virtual iframes": it allows you to put untrusted third-party HTML and JavaScript inline in your page and still be secure. (tags: software opensource javascript javascriptengine google caja)