[webkit-reviews] review requested: [Bug 25031] Chrome allows elements with names to override collection properties : [Attachment 29237] Fix

[bugzilla-daemon at webkit.org]

Dave Moore <davemoore at google.com> has asked Dimitri Glazkov (Google)
<dglazkov at chromium.org> for review:
Bug 25031: Chrome allows elements with names to override collection properties
https://bugs.webkit.org/show_bug.cgi?id=25031

Attachment 29237: Fix
https://bugs.webkit.org/attachment.cgi?id=29237&action=review

------- Additional Comments from Dave Moore <davemoore at google.com>
Added a new tests to ensure that JS can override the length property on the
HTMLSelectElement