For embedding JS from third parties see

• http://www.adsafe.org/ - Making JavaScript Safe for Advertising

  Related http://www.crockford.com/codecamp/

• http://code.google.com/p/google-caja/ - A source-to-source translator for securing Javascript-based web content