I'm making a single page app, and in this application; I'd like to download some arbitrary javascript code and execute it on the current page. It would not make sense in my situation to download "all" of the scripts that could execute on this page at once.
So is there a safe way to execute javascript that has been downloaded from a server via an XHR request. I was going to do the obvious and execute the downloaded string as javascript using eval, but I'd imagine this could be a security issue, and I constantly read of the evils of eval.
Can anybody comment on whether this would be safe? Is there an alternative method to XHR downloading scripts as strings and then calling them?
