Use function-constructor to identify questions involving the need to evaluate strings in any ECMAScript dialect while avoiding security risks associated with `eval`, such as script injection
