Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | <html xmlns="http://www.w3.org/1999/xhtml"> |
michael@0 | 2 | <head> |
michael@0 | 3 | |
michael@0 | 4 | <bindings xmlns="http://www.mozilla.org/xbl"> |
michael@0 | 5 | <binding id="g"> |
michael@0 | 6 | <implementation> |
michael@0 | 7 | <constructor> |
michael@0 | 8 | throw 3; |
michael@0 | 9 | </constructor> |
michael@0 | 10 | </implementation> |
michael@0 | 11 | </binding> |
michael@0 | 12 | </bindings> |
michael@0 | 13 | |
michael@0 | 14 | <script type="text/javascript"> |
michael@0 | 15 | |
michael@0 | 16 | function boom() |
michael@0 | 17 | { |
michael@0 | 18 | var HTML_NS = "http://www.w3.org/1999/xhtml"; |
michael@0 | 19 | var span = document.createElementNS(HTML_NS, 'span'); |
michael@0 | 20 | span.style.MozBinding = "url(#g)"; |
michael@0 | 21 | document.removeChild(document.documentElement) |
michael@0 | 22 | var w = document.createElementNS(HTML_NS, 'body'); |
michael@0 | 23 | w.setAttribute('onload', "/"); |
michael@0 | 24 | document.appendChild(span); |
michael@0 | 25 | } |
michael@0 | 26 | |
michael@0 | 27 | </script> |
michael@0 | 28 | </head> |
michael@0 | 29 | |
michael@0 | 30 | <body onload="boom();"></body> |
michael@0 | 31 | </html> |