• file
• revisions
• annotate
• diff
• comparison
• raw

content/base/crashtests/815500.html@6474c204b198 (annotated)

content/base/crashtests/815500.html

Wed, 31 Dec 2014 06:09:35 +0100

author

Michael Schloh von Bennewitz <michael@schloh.com>

date

Wed, 31 Dec 2014 06:09:35 +0100

changeset 0

6474c204b198

permissions

-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0	1	>><address id=test1> A,*/^㰞﷑ dq豑><script>
michael@0	2	function initCF() {
michael@0	3	try { test2 = document.createElementNS("http://www.w3.org/1999/xhtml", "tt"); } catch(e) {}
michael@0	4	try { test2.setAttribute("dir", "auto"); } catch(e) {}
michael@0	5	setTimeout("CFcrash()", 253);
michael@0	6	}
michael@0	7	document.addEventListener("DOMContentLoaded", initCF, false);
michael@0	8	function editFuzz() {
michael@0	9	}
michael@0	10	function CFcrash() {
michael@0	11	try { test2.appendChild(test1); } catch(e) {}
michael@0	12	setTimeout('try { test2.setAttribute("dir", "&locale.dir;"); } catch(e) {}', 462);
michael@0	13	try { test1.innerHTML = "Z3 ᜃ 洿G0겨=#⨝ g B md^뛳 j # 鮪 8媾䝀 &#x30054;ᖾd煏됚M:㕑,i⼷ Geኔ ≴핛 "; } catch(e) {}
michael@0	14	}</script>>