[Webkit-unassigned] [Bug 25031] Chrome allows elements with names to override collection properties

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=25031


davemoore at google.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #29237|review?(dglazkov at chromium.or|
               Flag|g)                          |
  Attachment #29237|0                           |1
        is obsolete|                            |
  Attachment #29240|                            |review?(dglazkov at chromium.or
               Flag|                            |g)




------- Comment #5 from davemoore at google.com  2009-04-03 14:06 PDT -------
Created an attachment (id=29240)
 --> (https://bugs.webkit.org/attachment.cgi?id=29240&action=view)
Fix

Remove test for JS setting the length property.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.