dom/base/crashtests/693811-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14

<!DOCTYPE html>
<script>

var collection = document.images;
var other = document.embeds;
var options = document.createElement("select").options;
collection.toString;
options.selectedIndex;
Object.getPrototypeOf(collection).item = {};
other.toString;
collection.toString;
options.selectedIndex;
options.toString;
</script>