1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
s = newGlobal() try { evalcx("\ function g() {\ h()\ }\ for (p in this) {\ function h(h) {\ ''instanceof 5\ }\ }\ h.valueOf=g;\ h==9\ ", s) } catch (e) {} try { evalcx("throw h", s) } catch (e) { try { "" + e } catch(e) {} }