The Tor Browser / file comparison
comparison: content/base/crashtests/343850-1.xhtml
content/base/crashtests/343850-1.xhtml
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:c21be9966e14 |
|---|---|
| 1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait"> | |
| 2 <head> | |
| 3 | |
| 4 <script> | |
| 5 <![CDATA[ | |
| 6 | |
| 7 function boom() | |
| 8 { | |
| 9 var div = document.getElementById("div"); | |
| 10 var embed = document.getElementById("embed"); | |
| 11 embed.setAttribute("src", "javascript:'QQQQ'"); | |
| 12 embed.removeAttribute("src"); | |
| 13 document.body.appendChild(div); | |
| 14 | |
| 15 document.documentElement.removeAttribute("class"); | |
| 16 } | |
| 17 | |
| 18 ]]> | |
| 19 </script> | |
| 20 | |
| 21 </head> | |
| 22 | |
| 23 <body onload="setTimeout(boom, 30);"> | |
| 24 | |
| 25 <div id="div"><embed id="embed"/></div> | |
| 26 | |
| 27 </body> | |
| 28 </html> |
