Security notes Script tests run JavaScript on the server. They run in a worker thread with a vm context, which gives clean globals and hard timeouts, but this is not a security sandbox. Only allow ...