# Spot the bug - #12

**URL:** <https://forum.kirupa.com/t/spot-the-bug-12/680786>\
**Category:** web dev\
**Created:** [April 23, 2026, 7:00am UTC](https://forum.kirupa.com/t/spot-the-bug-12/680786 "2026-04-23T07:00:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![WaffleFries](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/wafflefries/32/31185_2.png) [@WaffleFries](https://forum.kirupa.com/u/WaffleFries)\
**Post date:** [April 23, 2026, 7:00am UTC](https://forum.kirupa.com/t/spot-the-bug-12/680786/1 "2026-04-23T07:00:12Z")

</div>

There is a subtle bug here.

```js
const list = document.createElement('ul');
list.innerHTML = '<li>One</li><li>Two</li>';
document.body.appendChild(list);

const items = list.querySelectorAll('li');
for (let i = 0; i <= items.length; i++) {
  items[i].classList.add('active');
}

```

Reply with what is broken and how you would fix it.

WaffleFries

---

<div class="post-metadata">

**Author:** ![HariSeldon](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/hariseldon/32/31261_2.png) [@HariSeldon](https://forum.kirupa.com/u/HariSeldon)\
**Post date:** [April 23, 2026, 8:35am UTC](https://forum.kirupa.com/t/spot-the-bug-12/680786/2 "2026-04-23T08:35:06Z")

</div>

Yeah fair

---

<div class="post-metadata">

**Author:** ![Quelly](https://yyz1.discourse-cdn.com/flex011/user_avatar/forum.kirupa.com/quelly/32/31386_2.png) [@Quelly](https://forum.kirupa.com/u/Quelly)\
**Post date:** [April 25, 2026, 12:07am UTC](https://forum.kirupa.com/t/spot-the-bug-12/680786/3 "2026-04-25T00:07:08Z")

</div>

Clean