This transformational magic requires some actual analysis of the code. Under the covers, Eclipse maintains an AST (abstract syntax tree) — the deep structure (as linguist Noam Chomsky would say ...

However, if a previous statement contains other JavaScript code, that code is executed by the script. This might give the hacker access to all the variables a script has access to, potentially ...