tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

reverse-nonarray-nonwritable-element.js (524B)


      1 // Array.prototype.reverse does a strict assignment to this.length even if the
      2 // caller is nonstrict. Bug 886087.
      3 
      4 load(libdir + "asserts.js");
      5 
      6 // obj[1] is read-only
      7 var obj = {0: "zero", length: 2, reverse: [].reverse};
      8 Object.defineProperty(obj, "1", {configurable: true, value: "one", writable: false});
      9 assertThrowsInstanceOf(() => obj.reverse(), TypeError);
     10 
     11 // obj[1] has only a getter
     12 Object.defineProperty(obj, "1", {configurable: true, get: () => "one"});
     13 assertThrowsInstanceOf(() => obj.reverse(), TypeError);