layout/base/crashtests/736924-1.html

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0 1 <!DOCTYPE html>
michael@0 2 <html>
michael@0 3 <script>
michael@0 4 function boom()
michael@0 5 {
michael@0 6 var a = document.createElementNS("http://www.w3.org/1999/xhtml", "span");
michael@0 7 var b = document.createElementNS("http://www.w3.org/1999/xhtml", "span");
michael@0 8 var x = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
michael@0 9 var y = document.createElementNS("http://www.w3.org/1999/xhtml", "basefont");
michael@0 10 var z = document.createElementNS("http://www.w3.org/1999/xhtml", "body");
michael@0 11 z.setAttributeNS(null, "link", "#333333");
michael@0 12
michael@0 13 document.documentElement.appendChild(a);
michael@0 14 b.appendChild(x);
michael@0 15 b.appendChild(y);
michael@0 16 document.documentElement.offsetHeight;
michael@0 17 a.appendChild(b);
michael@0 18 document.documentElement.offsetHeight;
michael@0 19 document.createElementNS("http://www.w3.org/1999/xhtml", "div").appendChild(y);
michael@0 20 b.appendChild(z);
michael@0 21 }
michael@0 22 </script>
michael@0 23 <body onload="boom();"></body>

mercurial