Is It Safe to Host HTML That Runs Its Own JavaScript?