Well at least in Firefox, JavaScript native objects return function Object() { [native code] }, which has 'v'. So if we have window and Object, then i suppose we could do:
function Object() { [native code] }
window
Object
(window["Object"]+0)[29];
2.1m questions
2.1m answers
60 comments
57.0k users