<html> <head> <script> // change the eval function to ensure the window object in the debug-script is correctly wrapped window.eval = function () { return "unsecure-eval-called"; }; var globalAccessibleVar = "global-value"; </script> </head> <body> <h1>debug script target</h1> </body> </html>