The Tor Browser / file comparison
comparison: editor/libeditor/html/crashtests/682650-1.html
editor/libeditor/html/crashtests/682650-1.html
- changeset 2
- 7e26c7da4463
equal
deleted
inserted
replaced
| -1:000000000000 | 0:f3e5a4c4e361 |
|---|---|
| 1 <!DOCTYPE html> | |
| 2 <html> | |
| 3 <head> | |
| 4 <script> | |
| 5 | |
| 6 function repeatChar(s, n) | |
| 7 { | |
| 8 while (s.length < n) | |
| 9 s += s; | |
| 10 return s.substr(0, n); | |
| 11 } | |
| 12 | |
| 13 function boom() | |
| 14 { | |
| 15 document.documentElement.contentEditable = "true"; | |
| 16 document.execCommand("inserthtml", false, "<button><\/button>"); | |
| 17 document.execCommand("inserthtml", false, repeatChar("i", 34646)); | |
| 18 document.execCommand("contentReadOnly", false, null); | |
| 19 document.execCommand("removeformat", false, null); | |
| 20 document.execCommand("hilitecolor", false, "red"); | |
| 21 document.execCommand("inserthtml", false, "a"); | |
| 22 document.execCommand("delete", false, null); | |
| 23 } | |
| 24 | |
| 25 </script> | |
| 26 </head> | |
| 27 | |
| 28 <body onload="boom();"></body> | |
| 29 | |
| 30 </html> |
