google-caja - Google Code

Using Caja, web apps can safely allow scripts in third party content.