2.1.10 [ECMA-262/5] Section 220.127.116.11, Array.prototype.toString ()
The specification states:
NOTE The toString function is intentionally generic; it does not require that its this value be an Array object. Therefore it can be transferred to other kinds of objects for use as a method. Whether the toString function can be applied successfully to a host object is implementation-dependent.
IE9 Mode, IE10 Mode, and IE11 Mode (All Versions)
The toString method can be applied to a host object; however, some host objects may reject such an application.