They are probably using virtual machines anyway, so it's not hard to set it up to simply load ram state for each new page they are crawling. This sidesteps the security issue (as long as there's no sandbox escapes).
It's possible they are using components from Google Chrome as others mentioned, like V8.
