chromium/third_party/blink/manual_tests/inspector-wrappers/console-eval.html

<html>
<head>
<script src="inspector-wrappers-test-utils.js"></script>
<script>
window.eval = function() { doAttack(eval); }
</script>
</head>
<body>
<script>instructions({console: true, trigger: "something"});</script>
</body>
</html>