dom/src/jsurl/crashtests/344996-1.xhtml

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0 1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
michael@0 2 <head>
michael@0 3
michael@0 4 <script>
michael@0 5 <![CDATA[
michael@0 6
michael@0 7 var a;
michael@0 8 var b;
michael@0 9
michael@0 10 function foopy()
michael@0 11 {
michael@0 12 a = document.getElementById("a");
michael@0 13 b = document.getElementById("b");
michael@0 14
michael@0 15 var img = document.getElementById("img");
michael@0 16 var rx = document.getElementById("rx");
michael@0 17
michael@0 18 img.setAttribute('src', "javascript:aC(a, b);");
michael@0 19 aC(rx, a);
michael@0 20
michael@0 21 document.documentElement.removeAttribute("class");
michael@0 22 }
michael@0 23
michael@0 24 // This has to be a top-level function to avoid hitting bug 344890.
michael@0 25 function aC(q1, q2) { q1.appendChild(q2); }
michael@0 26
michael@0 27 ]]>
michael@0 28 </script>
michael@0 29
michael@0 30 </head>
michael@0 31
michael@0 32 <body onload="setTimeout(foopy, 30);">
michael@0 33
michael@0 34 <span id="a" style="border: 1px solid green;">A<img src="../../../../testing/crashtest/images/tree.gif" id="img" /></span>
michael@0 35
michael@0 36 <span id="b">B</span>
michael@0 37
michael@0 38 <div data="text/plain,Hi!" style="border: 1px solid blue; display: block;" id="rx" />
michael@0 39
michael@0 40 </body>
michael@0 41 </html>

mercurial