new Function considered harmful, or when is a closure not a closure?

I had an extended chat recently with friend and former colleague on the subject of safely rendering outside HTML with javascript in it on a server (basically for purposes of screen capture) and how to prevent the code in theā¦