Secure string interpolation

While working on giddy/gNius, I ran across this article about Secure interpolation on JavaScript written by peeps at Google's Caja. Very well written and nowhere close to my "this should work" approach. Check it out.