What exactly are the things that I can/can't do in the JS function block?

oh, i see why now
image

Yup...it's impossible :\

Nuh...
If you do ScOpEoUt(function(p){return function(){return function(){return this;}()}()[p]})and call it with XMLHttpRequest,you will succed,but then when you try sending it you will receive a "no defalut-src header" error

This thread started kinda off-topic and has only gotten worse since. Closing.