dom/bindings/crashtests/862610.html

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/dom/bindings/crashtests/862610.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,20 @@
     1.4 +<!DOCTYPE html>
     1.5 +<html>
     1.6 +<head>
     1.7 +<meta charset="UTF-8">
     1.8 +<script>
     1.9 +  HTMLElement.prototype.__proto__ = Proxy.create({}, {});
    1.10 +  try {
    1.11 +    window.Image;
    1.12 +  } finally {
    1.13 +    // Restore our prototype so the test harnesses can deal with us
    1.14 +    // We can't just assign to __proto__ because it lives on our proto chain
    1.15 +    // and we messed that up.
    1.16 +    var desc = Object.getOwnPropertyDescriptor(Object.prototype, "__proto__");
    1.17 +    desc.set.call(HTMLElement.prototype, Element.prototype);
    1.18 +  }
    1.19 +</script>
    1.20 +</head>
    1.21 +
    1.22 +<body></body>
    1.23 +</html>

mercurial