<!DOCTYPE html> <script> document.createElement("p").constructor = function(){}; </script>