bug1246552.js (186B)
1 var t = 0; 2 var y = []; 3 y.toString = (function() { t += 1 }); 4 function test() { 5 for (var i = 0; i < 14; i++) { 6 String.prototype.sup.call(y); 7 } 8 } 9 test(); 10 assertEq(t, 14);
tor-browserThe Tor Browser | |
| git clone https://git.dasho.dev/tor-browser.git | |
| Log | Files | Refs | README | LICENSE |