leaking globals

check `window.o`