The Tor Browser / file comparison
comparison: dom/src/jsurl/crashtests/344996-1.xhtml
dom/src/jsurl/crashtests/344996-1.xhtml
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:a1e2f23bd919 |
|---|---|
| 1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait"> | |
| 2 <head> | |
| 3 | |
| 4 <script> | |
| 5 <![CDATA[ | |
| 6 | |
| 7 var a; | |
| 8 var b; | |
| 9 | |
| 10 function foopy() | |
| 11 { | |
| 12 a = document.getElementById("a"); | |
| 13 b = document.getElementById("b"); | |
| 14 | |
| 15 var img = document.getElementById("img"); | |
| 16 var rx = document.getElementById("rx"); | |
| 17 | |
| 18 img.setAttribute('src', "javascript:aC(a, b);"); | |
| 19 aC(rx, a); | |
| 20 | |
| 21 document.documentElement.removeAttribute("class"); | |
| 22 } | |
| 23 | |
| 24 // This has to be a top-level function to avoid hitting bug 344890. | |
| 25 function aC(q1, q2) { q1.appendChild(q2); } | |
| 26 | |
| 27 ]]> | |
| 28 </script> | |
| 29 | |
| 30 </head> | |
| 31 | |
| 32 <body onload="setTimeout(foopy, 30);"> | |
| 33 | |
| 34 <span id="a" style="border: 1px solid green;">A<img src="../../../../testing/crashtest/images/tree.gif" id="img" /></span> | |
| 35 | |
| 36 <span id="b">B</span> | |
| 37 | |
| 38 <div data="text/plain,Hi!" style="border: 1px solid blue; display: block;" id="rx" /> | |
| 39 | |
| 40 </body> | |
| 41 </html> |
