layout/svg/crashtests/359516-1.svg

Tue, 06 Jan 2015 21:39:09 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Tue, 06 Jan 2015 21:39:09 +0100
branch
TOR_BUG_9701
changeset 8
97036ab72558
permissions
-rw-r--r--

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

michael@0 1 <svg xmlns="http://www.w3.org/2000/svg"
michael@0 2 xmlns:html="http://www.w3.org/1999/xhtml"
michael@0 3 class="reftest-wait"
michael@0 4 onload="setTimeout(doStuff, 30);">
michael@0 5
michael@0 6 <html:script style="display: none;" type="text/javascript">
michael@0 7
michael@0 8 function doStuff()
michael@0 9 {
michael@0 10 var svg = document.documentElement;
michael@0 11 var ellipse = document.getElementById("ellipse");
michael@0 12 var filter = document.getElementById("filter");
michael@0 13
michael@0 14 document.addEventListener("DOMNodeRemoved", foopy, false);
michael@0 15 filter.removeChild(filter.firstChild);
michael@0 16 document.removeEventListener("DOMNodeRemoved", foopy, false);
michael@0 17
michael@0 18 function foopy()
michael@0 19 {
michael@0 20 document.removeEventListener("DOMNodeRemoved", foopy, false);
michael@0 21 svg.appendChild(filter);
michael@0 22 }
michael@0 23
michael@0 24 // Needed for the crash, but not for the assertion.
michael@0 25 svg.appendChild(ellipse);
michael@0 26
michael@0 27 document.documentElement.removeAttribute("class");
michael@0 28 }
michael@0 29
michael@0 30 </html:script>
michael@0 31
michael@0 32 <ellipse id="ellipse" cx="200" cy="150" rx="70" ry="40" style="filter: url(#filter);"/>
michael@0 33
michael@0 34 <filter id="filter"> </filter>
michael@0 35
michael@0 36 </svg>

mercurial