summaryrefslogtreecommitdiff
path: root/dom/base/crashtests/493281-2.html
blob: 2369624694b22eed4f59763c181ddf8a32e744bf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
<html>
    <body>
        <div id="foo">
            <script>
                function get(x) { return x }
                obj = {};
                obj.__proto__ = get(document.all);
                obj.foo
            </script>
        </div>
    </body>
</html>