Hiding global access in node.js?

Question

Node.js

Task: to make it so that some code executing on the server through eval (or through the function constructor, it doesn’t matter) in any way could not access the global object and require.
A simple solution:

function runCode(code) {
  var global, require; 
  eval(code);
}

// evaled code:
console.log(global); // -> undefined

Solution workaround:

// evaled code:  
var global = eval("(new ('hello'.constructor.constructor)('return global;'))()");
console.log(global); // !!!

Question: how to more securely hide the global so that this workaround doesn't work?

Answer 1

vm.runInNewContext