jscript: Don't use call frame for indirect eval calls for storing variables. They're global in scope. Signed-off-by: Gabriel Ivăncescu <gabrielopcode@gmail.com>
jscript: Restrict the allowed escape characters of JSON.parse in html mode. Signed-off-by: Gabriel Ivăncescu <gabrielopcode@gmail.com>