blob: d146663fda3d5e6bed4c126e3fcdf36a1b0381a0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
<html>
<head>
<script src="inspector-wrappers-test-utils.js"></script>
<script>
window.str = window.expression = "alert({})";
window.alert = function(msg) {
msg.__proto__.toString = doAttack;
return msg;
}
</script>
</head>
<body>
<script>instructions({console: true, trigger: "something"});</script>
</body>
</html>
|
