jsBasic.secureConstructorFn.js - defensively check the existence of the instantiate of constructor function to avoid calling it as function.

jsBasic.secureConstructorFn.js

if (typeof Object.create === "undefined") {
    Object.create = function (prototype) {
        function C() {}
        C.prototype = prototype;
        return new C();
    };
}

function User(name, passwordHash) {
    var self = this instanceof User ? this : Object.create(User.prototype);
    self.name = name;
    self.passwordHash = passwordHash;
    return self;
}