Comment #2 on issue 1283 by [email protected]: Constructed objects don't
get their constructor property whitelisted.
http://code.google.com/p/google-caja/issues/detail?id=1283
From the contents of http://codereview.appspot.com/2543041/ I think there
may be a misunderstanding about where the "constructor" property comes
from. It is not the act of constructing an object that gives anything
a "constructor" property. Rather, when a function is created, it is
automagically endowed with a "prototype" property pointing at a fresh
object whose "constructor" property points back at it.
function f() {}
f.prototype.constructor === f
true