1 <html> 2 <head> 3 <script src="inspector-wrappers-test-utils.js"></script> 4 <script> 5 window.str = window.expression = "alert({})"; 6 window.alert = function(msg) { 7 msg.__proto__.toString = doAttack; 8 return msg; 9 } 10 </script> 11 </head> 12 <body> 13 <script>instructions({console: true, trigger: "something"});</script> 14 </body> 15 </html> 16
