The Tor Browser / file comparison
comparison: dom/xslt/crashtests/603844.html
dom/xslt/crashtests/603844.html
- branch
- TOR_BUG_9701
- changeset 8
- 97036ab72558
equal
deleted
inserted
replaced
| -1:000000000000 | 0:e8bdedfe0e32 |
|---|---|
| 1 <!DOCTYPE html> | |
| 2 <html class="reftest-wait"> | |
| 3 <head> | |
| 4 <script> | |
| 5 | |
| 6 function boom() | |
| 7 { | |
| 8 var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); | |
| 9 frame.onload = y; | |
| 10 frame.src = "data:text/plain,0"; | |
| 11 document.body.appendChild(frame); | |
| 12 frameDoc = frame.contentDocument; | |
| 13 | |
| 14 function y() | |
| 15 { | |
| 16 frameDoc.removeChild(frameDoc.documentElement); | |
| 17 | |
| 18 var xp = new XSLTProcessor; | |
| 19 xp.importStylesheet(frameDoc); | |
| 20 try { | |
| 21 xp.transformToDocument(frameDoc.createTextNode('x')); | |
| 22 } catch(e) { } | |
| 23 | |
| 24 document.documentElement.removeAttribute("class"); | |
| 25 } | |
| 26 } | |
| 27 | |
| 28 </script> | |
| 29 </head> | |
| 30 | |
| 31 <body onload="boom();"></body> | |
| 32 </html> |
