Side note - I built a tool to help detect non-default javascript variables attached to the global scope https://github.com/jonluca/Window-Differ to aid in security analysis like this. Would be pretty nice to have in devtools
Very cool ! To ensure there is only one JavaScript interface, I edit hackability to be without popups and print, then host it. Your tool sound easier. https://portswigger-labs.net/hackability