I think jquery could be substituted with zepto easily, but I do not know if it improves on this matter.
Zepto uses "eval()". It doesn't help on this matter :-(This function looks difficult for library developpers to avoid, despites the strong security issue it brings !
-- Camille