This test doesn't expose the flaw.
`document.write` another `script` before `b` and then `a.nextSibling.nextSibling.localName` is `null`.