1<html> 2<head> 3<script src="inspector-wrappers-test-utils.js"></script> 4<script> 5window.str = window.expression = "alert({})"; 6window.alert = function(msg) { 7 msg.__proto__.toString = doAttack; 8 return msg; 9} 10</script> 11</head> 12<body> 13<script>instructions({console: true, trigger: "something"});</script> 14</body> 15</html> 16