···

       
25
       
25
       
 
       


     

       
26
       
26
       
 
       
It only does three simple things:

     

       
27
       
27
       
 
       
- Isolate the [global object](https://developer.mozilla.org/en-US/docs/Glossary/Global_object) and uses a separate object using a `with` statement

     

       
28
       
28
       
-
       
- Wraps all passed through globals, like `Array`, in a recursive masking object that disallows access to prototype-polluting propeties, such as `constructor`

     

       
29
       
29
       
-
       
- In the browser: Creates an `iframe` element and uses that frame's globals instead

     

       
28
       
28
       
+
       
- Wraps all passed through globals, like `Array`, in a recursive masking object that disallows access to object prototype properties

     

       
29
       
29
       
+
       
- In the browser: Creates an `iframe` element and uses that frame's globals instead to prvent prototype pollution.

     

       
30
       
30
       
 
       


     

       
31
       
31
       
 
       
If you haven't run away screaming yet, maybe that's what you're looking for. Just a bit more safety.

     

       
32
       
32
       
 
       
But really, I wrote this just for fun and I haven't written any tests yet and neither have I tested all edge cases.