content/base/crashtests/493281-2.html

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:86da095eba6c
1 <html>
2 <body>
3 <div id="foo">
4 <script>
5 function get(x) { return x }
6 obj = {};
7 obj.__proto__ = get(document.all);
8 obj.foo
9 </script>
10 </div>
11 </body>
12 </html>

mercurial