dom/xbl/crashtests/382376-1.xhtml

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0 1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
michael@0 2 <head>
michael@0 3 <script>
michael@0 4
michael@0 5 function boom1()
michael@0 6 {
michael@0 7 var c = document.getElementById("c");
michael@0 8 c.style.MozBinding = "url('#foo')";
michael@0 9
michael@0 10 setTimeout(boom2, 30);
michael@0 11 }
michael@0 12
michael@0 13 function boom2()
michael@0 14 {
michael@0 15 var v = document.getElementById("v");
michael@0 16 v.parentNode.removeChild(v);
michael@0 17 document.documentElement.removeAttribute("class");
michael@0 18 }
michael@0 19
michael@0 20 </script>
michael@0 21
michael@0 22 <bindings xmlns="http://www.mozilla.org/xbl"><binding id="foo">
michael@0 23 <content>x x x x x <children/></content>
michael@0 24 </binding></bindings>
michael@0 25
michael@0 26 </head>
michael@0 27
michael@0 28 <body style="font-family: monospace; width: 10ch;" onload="setTimeout(boom1, 30);">
michael@0 29
michael@0 30 <div style="background: lightblue; border: 1px solid blue; margin-bottom: 1em;">
michael@0 31 <span id="c">y y<span id="v">Z<div/></span></span>
michael@0 32 </div>
michael@0 33
michael@0 34 <div style="background: lightgreen; border: 1px solid green; height: 2000px;">s</div>
michael@0 35
michael@0 36 </body>
michael@0 37 </html>

mercurial