dom/xbl/crashtests/406904-1.xhtml

Thu, 22 Jan 2015 13:21:57 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 22 Jan 2015 13:21:57 +0100
branch
TOR_BUG_9701
changeset 15
b8a032363ba2
permissions
-rw-r--r--

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

michael@0 1 <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xbl="http://www.mozilla.org/xbl">
michael@0 2 <head>
michael@0 3
michael@0 4 <xbl:bindings xmlns="http://www.mozilla.org/xbl"><xbl:binding id="a"><xbl:content>
michael@0 5 <span>foo<xbl:children/></span>
michael@0 6 </xbl:content></xbl:binding></xbl:bindings>
michael@0 7
michael@0 8 <script type="text/javascript">
michael@0 9
michael@0 10 function boom()
michael@0 11 {
michael@0 12 var s = document.getElementById("s");
michael@0 13 var anon = document.getAnonymousNodes(s)[0];
michael@0 14
michael@0 15 while (anon.firstChild)
michael@0 16 anon.removeChild(anon.firstChild);
michael@0 17
michael@0 18 document.documentElement.style.MozBinding = "url('data:text/xml,%3Cbindings%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%3E%3Cbinding%20id%3D%22foo%22%3E%3Ccontent%3EQ%3C%2Fcontent%3E%3C%2Fbinding%3E%3C%2Fbindings%3E%0A')";
michael@0 19 }
michael@0 20
michael@0 21 </script>
michael@0 22 </head>
michael@0 23
michael@0 24 <body onload="boom();"><span id="s" style="-moz-binding: url('#a');"></span></body>
michael@0 25 </html>

mercurial