comparison: dom/base/crashtests/695867.html
dom/base/crashtests/695867.html
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
|
1 <!DOCTYPE html> |
|
2 <script> |
|
3 |
|
4 var nodeList = document.documentElement.childNodes; |
|
5 nodeList.__proto__ = null; |
|
6 var p = Proxy.create({getPropertyDescriptor: function() {return nodeList}}); |
|
7 p.x; |
|
8 |
|
9 </script> |