The Tor Browser / file comparison
comparison: dom/xbl/crashtests/406904-2.xhtml
dom/xbl/crashtests/406904-2.xhtml
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
| -1:000000000000 | 0:1b3f4cfc0c29 |
|---|---|
| 1 <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xbl="http://www.mozilla.org/xbl"> | |
| 2 <head> | |
| 3 | |
| 4 <xbl:bindings xmlns="http://www.mozilla.org/xbl"><xbl:binding id="a"><xbl:content> | |
| 5 <span><span></span><xbl:children/></span> | |
| 6 </xbl:content></xbl:binding></xbl:bindings> | |
| 7 | |
| 8 <script type="text/javascript"> | |
| 9 | |
| 10 function boom() | |
| 11 { | |
| 12 var s = document.getElementById("s"); | |
| 13 var anon = document.getAnonymousNodes(s)[0]; | |
| 14 | |
| 15 while (anon.firstChild) | |
| 16 anon.removeChild(anon.firstChild); | |
| 17 | |
| 18 document.documentElement.style.MozBinding = "url('data:text/xml,%3Cbindings%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%3E%3Cbinding%20id%3D%22foo%22%3E%3Ccontent%3EQ%3C%2Fcontent%3E%3C%2Fbinding%3E%3C%2Fbindings%3E%0A')"; | |
| 19 } | |
| 20 | |
| 21 </script> | |
| 22 </head> | |
| 23 | |
| 24 <body onload="boom();"><span id="s" style="-moz-binding: url('#a');"></span></body> | |
| 25 </html> |
