<html> <head> <script src="inspector-wrappers-test-utils.js"></script> <script> window.alert = function(msg) { msg.__proto__.toString = doAttack; return msg; } </script> </head> <body> <script>instructions({console: true, trigger: "alert({})"});</script> </body> </html>