The Tor Browser / file comparison
comparison: editor/libeditor/html/crashtests/420439.html
editor/libeditor/html/crashtests/420439.html
- changeset 2
- 7e26c7da4463
equal
deleted
inserted
replaced
| -1:000000000000 | 0:31945df4c16c |
|---|---|
| 1 <html> | |
| 2 <head> | |
| 3 <script type="text/javascript"> | |
| 4 | |
| 5 function boom() | |
| 6 { | |
| 7 function x() | |
| 8 { | |
| 9 document.removeEventListener("DOMAttrModified", x, false); | |
| 10 document.execCommand("backcolor", false, "green"); | |
| 11 } | |
| 12 | |
| 13 document.getElementById("td").focus(); | |
| 14 | |
| 15 document.addEventListener("DOMAttrModified", x, false); | |
| 16 try { | |
| 17 document.execCommand("subscript", false, null); | |
| 18 } catch(e) { | |
| 19 } | |
| 20 document.removeEventListener("DOMAttrModified", x, false); | |
| 21 } | |
| 22 | |
| 23 </script> | |
| 24 </head> | |
| 25 | |
| 26 <body contenteditable="true" onload="setTimeout(boom, 30);"> | |
| 27 <table><tbody contenteditable="false"><tr><td contenteditable="true" id="td"></td></tr></tbody></table> | |
| 28 </body> | |
| 29 | |
| 30 </html> |
