summaryrefslogtreecommitdiffstats
path: root/Source/WebCore/manual-tests/inspector-wrappers/console-str-alert-object.html
diff options
context:
space:
mode:
Diffstat (limited to 'Source/WebCore/manual-tests/inspector-wrappers/console-str-alert-object.html')
-rw-r--r--Source/WebCore/manual-tests/inspector-wrappers/console-str-alert-object.html15
1 files changed, 15 insertions, 0 deletions
diff --git a/Source/WebCore/manual-tests/inspector-wrappers/console-str-alert-object.html b/Source/WebCore/manual-tests/inspector-wrappers/console-str-alert-object.html
new file mode 100644
index 0000000..d146663
--- /dev/null
+++ b/Source/WebCore/manual-tests/inspector-wrappers/console-str-alert-object.html
@@ -0,0 +1,15 @@
+<html>
+<head>
+<script src="inspector-wrappers-test-utils.js"></script>
+<script>
+window.str = window.expression = "alert({})";
+window.alert = function(msg) {
+ msg.__proto__.toString = doAttack;
+ return msg;
+}
+</script>
+</head>
+<body>
+<script>instructions({console: true, trigger: "something"});</script>
+</body>
+</html>