Demonstrate an exploit that breaks the sandbox

Prototypes of non-sandboxed built-in objects are leaked into the sandbox via the globals and API mechanisms. This pull request demonstrates how this can be exploited. There is no simple fix to this problem.

Signed-off-by: Nicolai Hähnle <nhaehnle@gmail.com>