Also note the use of _call.call(_toString, original) rather than simply original.toString(). This is because original.toString might itself be hooked by the time spoof is called. By holding cached references to Function.prototype.call and Function.prototype.toString at the very beginning of the script (before any page code runs), and invoking them via those cached references, the spoof function is immune to any tampering that might have happened in the interim. It’s eating its own tail in the most delightful way.
const stack = []; // 单调栈：存储「右侧候选更大值」，栈内元素单调递增
。关于这个话题，91视频提供了深入分析
// TypeError: Cannot obtain lock — stream is permanently locked
p = page_info(h);