chromium/src/third_party/blink/manual_tests/inspector-wrappers/console-alert-document-body.html - manifest_repos/chromium_src - Git at Google

 <html>
 <head>
 <script src="inspector-wrappers-test-utils.js"></script>
 <script>
 window.alert = function(msg) {
   msg.titleInfo = doAttack;
   return msg;
 }
 </script>
 </head>
 <body>
 <script>instructions({console: true, trigger: "alert(document.body)"});</script>
 </body>
 </html>
	<html>
	<head>
	<script src="inspector-wrappers-test-utils.js"></script>
	<script>
	window.alert = function(msg) {
	msg.titleInfo = doAttack;
	return msg;
	}
	</script>
	</head>
	<body>
	<script>instructions({console: true, trigger: "alert(document.body)"});</script>
	</body>
	</html>