summaryrefslogtreecommitdiff
path: root/dom/base/crashtests/693811-2.html
blob: 858e66f4f325c180bfbce86dfae2c365a75559f2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
<!DOCTYPE html>
<script>

var collection = document.images;
var other = document.embeds;
var options = document.createElement("select").options;
collection.toString;
options.selectedIndex;
Object.defineProperty(Object.getPrototypeOf(collection),
                      "item",
                      { value: {}, enumerable: true, configurable: true });
other.toString;
collection.toString;
options.selectedIndex;
options.toString;
</script>