dom/base/crashtests/693811-1.html

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:e4af4db2b137
1 <!DOCTYPE html>
2 <script>
3
4 var collection = document.images;
5 var other = document.embeds;
6 var options = document.createElement("select").options;
7 collection.toString;
8 options.selectedIndex;
9 Object.getPrototypeOf(collection).item = {};
10 other.toString;
11 collection.toString;
12 options.selectedIndex;
13 options.toString;
14 </script>

mercurial