Jon Harrop wrote :
> We're gearing up for the release of our hardware-accelerated vector graphics 
> engine, Smoke. As our foray into web programming, I'd like to create a new 
> kind of browser that allows content to be scripted in OCaml.
>
> What is the best way to execute downloaded OCaml code safely
You can use the dynlink library.
When you load module with that, you can specify the modules that can't
be accessed from the loaded code.

http://caml.inria.fr/pub/docs/manual-ocaml/libref/Dynlink.html#6_Accesscontrol