Einschränken von Dyn-Eval Template-Geltungsbereichen durch Javascript-Proxy-Isolations-Traps

export function createSecureScope(allowedContext) {
  return new Proxy(allowedContext, {
    has(target, key) {
      if (['window', 'document', 'eval', 'Function'].includes(key)) {
        throw new Error(`Access to restricted global '${key}' is prohibited.`);
      }
      return Reflect.has(target, key) || key in globalThis;
    },
    get(target, key, receiver) {
      if (key === Symbol.unscopables) return undefined;
      return Reflect.get(target, key, receiver);
    }
  });
}