Well at least in Firefox, JavaScript native objects return function Object() { [native code] }, which has 'v'. So if we have window and Object, then i suppose we could do:
function Object() { [native code] }
window
Object
(window["Object"]+0)[29];
1.4m articles
1.4m replys
5 comments
57.0k users