Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
michael@0 | 1 | <html xmlns="http://www.w3.org/1999/xhtml" style="-moz-binding: url(#foo)"> |
michael@0 | 2 | <head> |
michael@0 | 3 | |
michael@0 | 4 | <xbl:bindings xmlns:xbl="http://www.mozilla.org/xbl"> |
michael@0 | 5 | <xbl:binding id="foo"><xbl:content><fieldset><xbl:children/></fieldset></xbl:content></xbl:binding> |
michael@0 | 6 | </xbl:bindings> |
michael@0 | 7 | |
michael@0 | 8 | <script type="text/javascript"> |
michael@0 | 9 | |
michael@0 | 10 | function boom() |
michael@0 | 11 | { |
michael@0 | 12 | var dE = document.documentElement; |
michael@0 | 13 | var leg = document.createElementNS("http://www.w3.org/1999/xhtml", "legend"); |
michael@0 | 14 | leg.style.cssFloat = "left"; |
michael@0 | 15 | dE.appendChild(leg); |
michael@0 | 16 | document.documentElement.offsetHeight; |
michael@0 | 17 | dE.removeChild(leg); |
michael@0 | 18 | } |
michael@0 | 19 | |
michael@0 | 20 | </script> |
michael@0 | 21 | |
michael@0 | 22 | </head> |
michael@0 | 23 | |
michael@0 | 24 | <body onload="boom();"></body> |
michael@0 | 25 | |
michael@0 | 26 | </html> |