Comment by lambdapie

You can run untrusted code in an iframe (possibly with the sandbox attribute set). I think this would be what you're looking for.