comparison: dom/base/crashtests/695867.html
dom/base/crashtests/695867.html
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
|
1 <!DOCTYPE html> |
|
2 <script> |
|
3 |
|
4 var nodeList = document.documentElement.childNodes; |
|
5 nodeList.__proto__ = null; |
|
6 var p = Proxy.create({getPropertyDescriptor: function() {return nodeList}}); |
|
7 p.x; |
|
8 |
|
9 </script> |