The MySpace application guidelines specify we may not "contain or create SCRIPT tags pointing to external sources", and likewise for CSS.

May we add inline JS or CSS to the document directly, i.e., within <script> or <style> tags? For example, may I request an XHTML snippet from my host that contains inline CSS or JS and add this to the DOM?

Or, equivalently, will we have direct access to a "cajoler" that can be used at run time to take a random script-as-string and inject it into the document as a cajoled script? 

I notice that the Caja spec on Google's site talks about a caja.eval() method to dynamically cajole code, but no such method appears to be available in the MySpace dev environment.

Also, the dev environment appears to vary between the MySpace canvas page and the MySpace profile page, which is confusing because I was under the impression that both will be running the same code at launch time.

Can anyone comment on these items?