is this correct way to expose eval?

[xevin]

iframe.html



var for_pBridge = {};
for_pBridge.eval = function(code, _return){
if (_return == true) {
eval("var retVal=" + code);
return retVal;
}
else
eval(code);
};
window.childSandboxBridge = for_pBridge;


usage:

var cbridge = document.getElementById('iframe1').contentWindow.childSandboxBridge;

air.trace(cbridge.eval('1+1', true));
cbridge.eval('alert(1+1);');