layout/generic/crashtests/667025.html

Fri, 16 Jan 2015 04:50:19 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Fri, 16 Jan 2015 04:50:19 +0100
branch
TOR_BUG_9701
changeset 13
44a2da4a2ab2
permissions
-rw-r--r--

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

michael@0 1 <html>
michael@0 2 <head>
michael@0 3 <script>
michael@0 4
michael@0 5 function boom()
michael@0 6 {
michael@0 7 document.documentElement.offsetHeight;
michael@0 8
michael@0 9 document.documentElement.style.direction = "rtl";
michael@0 10
michael@0 11 document.documentElement.offsetHeight;
michael@0 12 var s = document.getElementById("s");
michael@0 13
michael@0 14 s.removeChild(s.firstChild);
michael@0 15
michael@0 16 document.documentElement.offsetHeight;
michael@0 17 }
michael@0 18
michael@0 19 </script>
michael@0 20 </head>
michael@0 21 <body onload="boom();" style="width: 1px;"><span id="s"> x y</span></body>
michael@0 22 </html>

mercurial