Fri, 16 Jan 2015 04:50:19 +0100
Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32
michael@0 | 1 | <html xmlns="http://www.w3.org/1999/xhtml"> |
michael@0 | 2 | <head> |
michael@0 | 3 | <title>dom cellmap crash</title> |
michael@0 | 4 | |
michael@0 | 5 | |
michael@0 | 6 | |
michael@0 | 7 | <script> |
michael@0 | 8 | function doit() |
michael@0 | 9 | { |
michael@0 | 10 | var doc = window.document; |
michael@0 | 11 | var t1= doc.getElementById('table1'); |
michael@0 | 12 | var tbA = doc.createElement('tbody'); |
michael@0 | 13 | t1.appendChild(tbA); |
michael@0 | 14 | var trA = doc.createElement('tr'); |
michael@0 | 15 | var td = doc.createElement('td'); |
michael@0 | 16 | td.setAttribute('rowspan', 2); |
michael@0 | 17 | trA.appendChild(td); |
michael@0 | 18 | tbA.appendChild(trA); |
michael@0 | 19 | var trB = doc.createElement('tr'); |
michael@0 | 20 | var tdB = doc.createElement('td'); |
michael@0 | 21 | tdB.setAttribute('rowspan', 2); |
michael@0 | 22 | trB.appendChild(tdB); |
michael@0 | 23 | tbA.appendChild(trB); |
michael@0 | 24 | tdB.parentNode.removeChild(tdB); |
michael@0 | 25 | trA.parentNode.removeChild(trA); |
michael@0 | 26 | trB.parentNode.removeChild(trB); |
michael@0 | 27 | var tb = doc.createElement('tbody'); |
michael@0 | 28 | trB.appendChild(tdB); |
michael@0 | 29 | tb.appendChild(trB); |
michael@0 | 30 | t1.appendChild(tb); |
michael@0 | 31 | } |
michael@0 | 32 | </script> |
michael@0 | 33 | |
michael@0 | 34 | </head> |
michael@0 | 35 | |
michael@0 | 36 | <body onload="doit()"> |
michael@0 | 37 | |
michael@0 | 38 | <table id="table1"><tbody id="tbody1"><tr id="tr1"><td id="td1">x</td></tr></tbody></table> |
michael@0 | 39 | |
michael@0 | 40 | |
michael@0 | 41 | |
michael@0 | 42 | |
michael@0 | 43 | </body> |
michael@0 | 44 | |
michael@0 | 45 | </html> |