[vulnerability][acl][regression] Calls to local functions in with-clause are not hooked

[t2ym]

[vulnerability][acl][regression] Calls to local functions in with-clause are not hooked

Root Cause

• Regression in the fix for [acl][hook] Local variables in a with block are mistreated as global variables in ACL #339
• Calls to let and const local functions have to be hooked

Reproducible Code

with ({}) {
  let f = function f() {}
  f(); // not hooked
  new f(); // not hooked
}

Fix

• Hook calls to local variables in a with clause