code: function unsafeEval(str){
              var head = document.getElementsByTagName("head")[0];
              var script = document.createElement("script");
              script.innerHTML = '('+str+')();';
              head.appendChild(script);
              head.removeChild(script);
          }
docs: eval with unsafe window