The Tor Browser / file comparison
comparison: layout/base/crashtests/379105-1.xhtml
layout/base/crashtests/379105-1.xhtml
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:0195792db68b |
|---|---|
| 1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait"> | |
| 2 <head> | |
| 3 <bindings xmlns="http://www.mozilla.org/xbl"> | |
| 4 | |
| 5 <binding id="x"><content> | |
| 6 <zzz><children/></zzz> | |
| 7 </content></binding> | |
| 8 | |
| 9 <binding id="empty"><content> | |
| 10 </content></binding> | |
| 11 | |
| 12 </bindings> | |
| 13 | |
| 14 <script> | |
| 15 <![CDATA[ | |
| 16 | |
| 17 var xbltarget; | |
| 18 | |
| 19 function boom1() | |
| 20 { | |
| 21 xbltarget = document.getElementById("xbltarget"); | |
| 22 xbltarget.style.MozBinding = "url('#x')"; | |
| 23 setTimeout(boom2, 0); | |
| 24 } | |
| 25 | |
| 26 function boom2() | |
| 27 { | |
| 28 var nodes = SpecialPowers.unwrap(SpecialPowers.wrap(document).getAnonymousNodes(xbltarget)); | |
| 29 if (!nodes) { | |
| 30 setTimeout(boom2, 10); | |
| 31 return; | |
| 32 } | |
| 33 var anox = nodes[0]; | |
| 34 var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "frame") | |
| 35 frame.src = "data:text/html,<html><body>Hi!</body></html>"; | |
| 36 anox.appendChild(frame); | |
| 37 xbltarget.style.MozBinding = "url('#empty')"; | |
| 38 | |
| 39 document.documentElement.removeAttribute("class"); | |
| 40 } | |
| 41 | |
| 42 ]]> | |
| 43 </script> | |
| 44 </head> | |
| 45 <body onload="boom1()"> | |
| 46 <div id="xbltarget"></div> | |
| 47 </body> | |
| 48 </html> |
