Sandbox code evaluation / prevent redirections

Trying to test the parser I see that in the editor you can write everything. There is not check on what you are writing. You can write for example `alert('hello')` or whatever.

I think that we need to parse the string before evaluate it, extracting method and check it is enabled to use.
