Current code handles omitted deleteCount but assumes it to be zero in that case. Instead an omitted deleteCount means delete everything from `start`.
This prevents Adobe sign-in page from loading.
-- v2: jscript: fix Array.prototype.splice with omitted deleteCount in html mode