Comment #5 on issue 1283 by metaweta: Constructed objects don't get their constructor property whitelisted.
http://code.google.com/p/google-caja/issues/detail?id=1283
So right now we're deferring the whitelisting of properties on f; when someone looks up a property on f, we should whitelist f.prototype.constructor.
