with no permissions, this prints 'yee'. In a browser's dev tools it would do the same thing, except there is a drop down to select which process's consoles to view, defaulted to showing all.
new Worker(URL.createObjectURL(new Blob(['console.log("yee")'], {type: 'text/javascript'})), {type: 'module'})
new Worker(URL.createObjectURL(new Blob(['console.log("yee")'], {type: 'text/javascript'})), {type: 'module'})
Is there a way to control what shows up on console? Is overwriting console a solid approach?