[deecewan]

This is not true, at least in Chrome. I've tried with an object with the `toString` property set, and tried with a function with an updated prototype. In both cases, Chrome just...displays the object.

[iudqnolq]

I just ran the poc I posted in this sibling comment[1] on Chrome Version 111.0.5563.65.

[1]: https://news.ycombinator.com/item?id=35240559