Sample that shows how to
main.js window contains a
<textarea> with a code snippet that needs to be
eval()-ed. When the "Eval" button is pressed, it creates a sandboxed iframe and sends the code string to it via
window.postMessage(). The sandboxed iframe (source in
iframe.js) is not restricted by the app's CSP, so it can
eval() the string it receives, and
postMessage() the result of running the evaluated code back.