Is it possible to sandbox JavaScript running in the browser?

Google Caja is a source-to-source translator that “allows you to put untrusted third-party HTML and JavaScript inline in your page and still be secure.”