[Webkit-unassigned] [Bug 25031] New: Chrome allows elements with names to override collection properties

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25031

           Summary: Chrome allows elements with names to override collection
                    properties
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: davemoore at google.com


If you have an HTMLSelectElement and it has an option that happens to be named
'length' you will get this element when accessing the length property, instead
of the actual length. This also causes these accesses to be slower than they
need to be.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.