1 2 3 4 5 6
Function.prototype.toString = function () f(this, true); function f(obj) { f.caller.p } decodeURI + 3;