The Tor Browser / file comparison
comparison: dom/base/crashtests/693811-2.html
dom/base/crashtests/693811-2.html
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:781458a1a740 |
|---|---|
| 1 <!DOCTYPE html> | |
| 2 <script> | |
| 3 | |
| 4 var collection = document.images; | |
| 5 var other = document.embeds; | |
| 6 var options = document.createElement("select").options; | |
| 7 collection.toString; | |
| 8 options.selectedIndex; | |
| 9 Object.defineProperty(Object.getPrototypeOf(collection), | |
| 10 "item", | |
| 11 { value: {}, enumerable: true, configurable: true }); | |
| 12 other.toString; | |
| 13 collection.toString; | |
| 14 options.selectedIndex; | |
| 15 options.toString; | |
| 16 </script> |
