Function("debugger").call()/apply() 或赋值 bind()xxx.constructor("debugger").call("action")Fuction.constructor("debugger").call("action")(function(){return !![];}["constructor"]("debugger")["call"]("action"))
Function("debugger").call()/apply() 或赋值 bind()
xxx.constructor("debugger").call("action")
Fuction.constructor("debugger").call("action")
(function(){return !![];}["constructor"]("debugger")["call"]("action"))