The Tor Browser / file comparison
comparison: dom/base/crashtests/499006-1.html
dom/base/crashtests/499006-1.html
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:fdbe4e579b25 |
|---|---|
| 1 <html> | |
| 2 <head> | |
| 3 <script type="text/javascript"> | |
| 4 | |
| 5 function select(start, startOffset, end, endOffset) { | |
| 6 var sel = getSelection(); | |
| 7 sel.removeAllRanges(); | |
| 8 var range = document.createRange(); | |
| 9 range.setStart(start, startOffset); | |
| 10 range.setEnd(end, endOffset); | |
| 11 sel.addRange(range); | |
| 12 } | |
| 13 | |
| 14 function boom() { | |
| 15 var p = document.body; | |
| 16 select(p.childNodes[0],0,p.childNodes[0],1); | |
| 17 sel = getSelection(); | |
| 18 range = sel.getRangeAt(0); | |
| 19 range.detach(); | |
| 20 range.insertNode(p); | |
| 21 } | |
| 22 | |
| 23 </script> | |
| 24 </head> | |
| 25 <body onload="boom()"><span>Hello Kitty</span></body> | |
| 26 </html> |
