gfx/tests/crashtests/483120-1.xhtml

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:641d209b1522
1 <html xmlns="http://www.w3.org/1999/xhtml" style="font-family: monospace;">
2 <head>
3
4 <bindings xmlns="http://www.mozilla.org/xbl">
5 <binding id="w"><content><div xmlns="http://www.w3.org/1999/xhtml"><children xmlns="http://www.mozilla.org/xbl"/></div></content></binding>
6 <binding id="empty"><content/></binding>
7 </bindings>
8
9 <script type="text/javascript">
10
11 function boom()
12 {
13 document.createElementNS("http://www.w3.org/2000/svg", "rect");
14 document.getElementById("d").previousSibling.data += "C";
15 document.getElementById("d").style.MozBinding = "url('#empty')";
16 }
17
18 </script>
19
20 </head>
21
22 <body onload="boom();"><span>A&#x202E;<span style="-moz-binding: url('#w');"></span>B<span id="d" style="font-size: 80%; color: green;">D</span></span></body>
23 </html>

mercurial