== 1. A 'defensive' copy made with clone() trusts the argument's own clone() ==
  clone() result is the attacker's object : true
  clone() result class                    : EvilDate

== 2. A copy made with the constructor does not ==
  new Date(getTime()) is the attacker's object : false
  new Date(getTime()) result class             : Date