comparison: dom/base/crashtests/601247.html
dom/base/crashtests/601247.html
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
|
1 <!DOCTYPE html> |
|
2 <script> |
|
3 |
|
4 var x = document.createTextNode("x"); |
|
5 x.__proto__ = localStorage; |
|
6 for (var p in x) {}; |
|
7 |
|
8 </script> |