Patch 'eval.constructor' bypass