dom/base/crashtests/708405-1.html

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:85691bcc5bfd
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <script>
5
6 function boom()
7 {
8 var a = document.getElementsByTagName("div");
9 a.__proto__ = Proxy.create({has: function() { throw new Error; }});
10 for (var p in a) {
11 }
12 }
13
14 </script>
15 </head>
16
17 <body onload="boom();"></body>
18 </html>

mercurial