How to reproduce
Prototype pollution defense: One test patches Object.prototype.then to intercept promise resolutions, then verifies that pipeTo() and tee() operations don't leak internal values through the prototype chain. This tests a security property that only exists because the spec's promise-heavy internals create an attack surface.
，这一点在旺商聊官方下载中也有详细论述
You gave it a string for each frame，详情可参考WPS官方版本下载
Horror/Psychological/Thriller。关于这个话题，搜狗输入法下载提供了深入分析