16 lines
321 B
HTML
16 lines
321 B
HTML
<html>
|
|
<head>
|
|
<script src="inspector-wrappers-test-utils.js"></script>
|
|
<script>
|
|
window.str = window.expression = "alert({})";
|
|
window.alert = function(msg) {
|
|
msg.__proto__.toString = doAttack;
|
|
return msg;
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<script>instructions({console: true, trigger: "something"});</script>
|
|
</body>
|
|
</html>
|