zenn-hukashi

invisible-char-attack-samples.js

// 1 is where ?? real invisible

// ----------------------------------------
// 2. setTimeout / setInterval
// ----------------------------------------
// setTimeout
setTimeout('console.log("edamame is good!");', 1);
//  1ms "edamame is good!" 
// setInterval 


// ----------------------------------------
// 3. .constructor 
// ----------------------------------------

//  constructor 
({}).constructor
//  f Object() { [native code] }

//  constructor= Function
( => _).constructor('console.log("edamame is good!");')();
//  "edamame is good!"

// constructorFunction
const user = { isAdmin: true };
user.isAdmin.constructor
//  f Boolean() { [native code] }
user.isAdmin.constructor.constructor
//  f Function() { [native code] }

// 
user.isAdmin.constructor.constructor('console.log("edamame is good!");')();
//  "edamame is good!"


// ----------------------------------------
// 4. dynamic import 
// ----------------------------------------
// JavaScriptData URI
import("data:text/javascript,console.log('edamame is good!')");
//  Promise {<pending>}
//  "edamame is good!"