The !(skipConstructor && name === 'constructor') should be moved into the hasDontEnumBug block.

[jdalton]

The !(skipConstructor && name === 'constructor') should be moved into the hasDontEnumBug block. And constructor should be added to the dontEnums array.

You can test this by having an object of properties, smth like I do in my own tests:

var shadowedProps = [
    'constructor',
    'hasOwnProperty',
    'isPrototypeOf',
    'propertyIsEnumerable',
    'toLocaleString',
    'toString',
    'valueOf'
  ];

  /** Used to check problem JScript properties too */
  var shadowedObject = _.invert(shadowedProps);

In older IE Object.keys(shadowedObject) should produce an array of keys that is equiv to shadowedProps. The constructor check which should be moved to the hasDontEnumBug is to ensure that the constructor property is skipped on prototype objects but not plain object literals.