You have to check this out: http://websandbox.livelabs.com/
Please try and break the isolation model by injecting clever scripts on the websandbox website. If you find gaping holes, share it right in the forums on the site (they are fundamentally transparent). Enjoy!