Could the browser create a tight whitelist of payloads that are definitely not hostile, then expand it slowly to add functionality?