highWaterMark: 10,
This is a well-known browser security technique. In JavaScript, calling .toString() on a native browser function returns "function appendBuffer() { [native code] }". Calling it on a JavaScript function returns the actual source code. So if your appendBuffer has been monkey-patched, .toString() will betray you; it’ll return the attacker’s JavaScript source instead of the expected native code string.。关于这个话题，爱思助手下载最新版本提供了深入分析
Author(s): Niusha Niknahad, Obioma U. Uche。Safew下载对此有专业解读
Зарина Дзагоева，推荐阅读服务器推荐获取更多信息