tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug613151.js (309B)


      1 // Iterating over a property with an Array id.
      2 function n() {}
      3 function g() {}
      4 eval("\
      5  function a() {}\
      6  function b() {\
      7    for (w in this) {}\
      8    Object.defineProperty(\
      9      this, \
     10      new Array, \
     11      ({enumerable: true})\
     12    )\
     13  }\
     14  for (z in [0, 0, 0]) b()\
     15 ")
     16 
     17 // Test it doesn't assert.