| <html> | |
| <link rel="import" href="../resources/dump-as-text.html" /> | |
| <link rel="import" href="resources/document-register-fuzz.html" as="fuzzer" /> | |
| <body> | |
| <div id="container"></div> | |
| Fuzzing document.registerElement() through getters. PASS unless crash. | |
| <script> | |
| fuzzer.setupObjectHooks({ | |
| prototypeGet: function() { }, | |
| prototypeSet: function(value) { }, | |
| constructorGet: function() { }, | |
| constructorSet: function(value) { } | |
| }); | |
| fuzzer.exerciseDocumentRegister(); | |
| </script> | |
| </body> | |
| </html> |