The Tor Browser / file comparison
comparison: layout/svg/crashtests/359516-1.svg
layout/svg/crashtests/359516-1.svg
- branch
- TOR_BUG_9701
- changeset 8
- 97036ab72558
equal
deleted
inserted
replaced
| -1:000000000000 | 0:660b95a8a388 |
|---|---|
| 1 <svg xmlns="http://www.w3.org/2000/svg" | |
| 2 xmlns:html="http://www.w3.org/1999/xhtml" | |
| 3 class="reftest-wait" | |
| 4 onload="setTimeout(doStuff, 30);"> | |
| 5 | |
| 6 <html:script style="display: none;" type="text/javascript"> | |
| 7 | |
| 8 function doStuff() | |
| 9 { | |
| 10 var svg = document.documentElement; | |
| 11 var ellipse = document.getElementById("ellipse"); | |
| 12 var filter = document.getElementById("filter"); | |
| 13 | |
| 14 document.addEventListener("DOMNodeRemoved", foopy, false); | |
| 15 filter.removeChild(filter.firstChild); | |
| 16 document.removeEventListener("DOMNodeRemoved", foopy, false); | |
| 17 | |
| 18 function foopy() | |
| 19 { | |
| 20 document.removeEventListener("DOMNodeRemoved", foopy, false); | |
| 21 svg.appendChild(filter); | |
| 22 } | |
| 23 | |
| 24 // Needed for the crash, but not for the assertion. | |
| 25 svg.appendChild(ellipse); | |
| 26 | |
| 27 document.documentElement.removeAttribute("class"); | |
| 28 } | |
| 29 | |
| 30 </html:script> | |
| 31 | |
| 32 <ellipse id="ellipse" cx="200" cy="150" rx="70" ry="40" style="filter: url(#filter);"/> | |
| 33 | |
| 34 <filter id="filter"> </filter> | |
| 35 | |
| 36 </svg> |
