bug1696897.js (171B)
1 function foo() { 2 Object.defineProperty(this, "valueOf", ({value: 0, writable: true})); 3 Object.freeze(this); 4 } 5 6 for (var i = 0; i < 100; i++) { 7 foo.call(''); 8 }
tor-browserThe Tor Browser | |
| git clone https://git.dasho.dev/tor-browser.git | |
| Log | Files | Refs | README | LICENSE |