The Tor Browser / file comparison
comparison: dom/xbl/crashtests/421997-1.xhtml
dom/xbl/crashtests/421997-1.xhtml
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:de7cb60b64e5 |
|---|---|
| 1 <html xmlns="http://www.w3.org/1999/xhtml"> | |
| 2 <head> | |
| 3 | |
| 4 <bindings xmlns="http://www.mozilla.org/xbl"> | |
| 5 <binding id="g"> | |
| 6 <implementation> | |
| 7 <constructor> | |
| 8 throw 3; | |
| 9 </constructor> | |
| 10 </implementation> | |
| 11 </binding> | |
| 12 </bindings> | |
| 13 | |
| 14 <script type="text/javascript"> | |
| 15 | |
| 16 function e() | |
| 17 { | |
| 18 var listboxbody = document.createElementNS("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul", "listboxbody"); | |
| 19 document.getElementById("s").appendChild(listboxbody); | |
| 20 } | |
| 21 | |
| 22 </script> | |
| 23 </head> | |
| 24 | |
| 25 <body onerror="e();"><span id="s" style="-moz-binding: url(#g)"></span></body> | |
| 26 | |
| 27 </html> |
