Tue, 06 Jan 2015 21:39:09 +0100
Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.
michael@0 | 1 | <!DOCTYPE html> |
michael@0 | 2 | <html class="reftest-wait"> |
michael@0 | 3 | <head> |
michael@0 | 4 | <script> |
michael@0 | 5 | |
michael@0 | 6 | function boom() |
michael@0 | 7 | { |
michael@0 | 8 | var frame1 = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); frame1.src = "data:text/html,1"; document.body.appendChild(frame1); |
michael@0 | 9 | var frame2 = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); frame2.src = "data:text/html,2"; document.body.appendChild(frame2); |
michael@0 | 10 | var frame1doc = frame1.contentDocument; |
michael@0 | 11 | var frame1root = frame1doc.documentElement; |
michael@0 | 12 | frame1root.appendChild(frame2); |
michael@0 | 13 | setTimeout(function() { |
michael@0 | 14 | try { |
michael@0 | 15 | frame2.contentDocument.q = frame1root.__lookupGetter__("nextSibling"); |
michael@0 | 16 | } catch(ex) {} |
michael@0 | 17 | document.documentElement.removeAttribute("class"); |
michael@0 | 18 | }, 200); |
michael@0 | 19 | } |
michael@0 | 20 | |
michael@0 | 21 | </script> |
michael@0 | 22 | </head> |
michael@0 | 23 | |
michael@0 | 24 | <body onload="boom();"></body> |
michael@0 | 25 | </html> |
michael@0 | 26 |