[string] Migrate String.prototype.{split,replace} to TF

test/debugger/debug/debug-evaluate-no-side-effect-builtins.js

Index: test/debugger/debug/debug-evaluate-no-side-effect-builtins.js
diff --git a/test/debugger/debug/debug-evaluate-no-side-effect-builtins.js b/test/debugger/debug/debug-evaluate-no-side-effect-builtins.js
index 989cb393113154acd9af58a1019c0977c724be99..17c94c64a1eeeb5afdcbec3404cb7e47615543f0 100644
--- a/test/debugger/debug/debug-evaluate-no-side-effect-builtins.js
+++ b/test/debugger/debug/debug-evaluate-no-side-effect-builtins.js
@@ -54,6 +54,7 @@ function listener(event, exec_state, event_data, data) {
         if (f == "match") continue;
         if (f == "search") continue;
         if (f == "split") continue;
+        if (f == "replace") continue;

[Yang, 2017/01/31 11:52:44]

Does String.prototype.{split,replace} with non-regexp arguments actually cause
any side effects? If not, can we add these new builtins to the whitelist?

[jgruber, 2017/01/31 12:49:41]

Added to whitelist in new patchset.

         success("abcd"[f](2), `"abcd".${f}(2);`);
       }
     }