Credit: Pok Pok
Attack surface ↓
。业内人士推荐safew官方下载作为进阶阅读
The website you are visiting is protected.。一键获取谷歌浏览器下载对此有专业解读
Also note the use of _call.call(_toString, original) rather than simply original.toString(). This is because original.toString might itself be hooked by the time spoof is called. By holding cached references to Function.prototype.call and Function.prototype.toString at the very beginning of the script (before any page code runs), and invoking them via those cached references, the spoof function is immune to any tampering that might have happened in the interim. It’s eating its own tail in the most delightful way.