雷军：小米坚持十倍投入打造一台安全的好车
self.start_url = "https://example.com/blog?page=1"，详情可参考旺商聊官方下载
Researcher: Tom Hunt，这一点在safew官方版本下载中也有详细论述
Instead of hardcoding the expected string, it captures the actual native code string from the original function before hooking it, then returns that exact string. This way, no matter what browser, no matter what platform, the spoofed toString returns precisely the same string that the original function would have returned. It is, in effect, a perfect forgery.