The Tor Browser / file comparison
comparison: layout/generic/crashtests/868906.html
layout/generic/crashtests/868906.html
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
| -1:000000000000 | 0:5a5f5556050a |
|---|---|
| 1 <!DOCTYPE html> | |
| 2 <html class="reftest-wait"> | |
| 3 <head> | |
| 4 <meta charset="UTF-8"> | |
| 5 <script> | |
| 6 | |
| 7 function boom() | |
| 8 { | |
| 9 var root = document.documentElement; | |
| 10 while(root.firstChild) { root.removeChild(root.firstChild); } | |
| 11 root.appendChild(document.createElement("body")); | |
| 12 root.offsetHeight; | |
| 13 | |
| 14 var bigText = document.createTextNode(""); | |
| 15 bigText.data += "\u202D"; | |
| 16 bigText.data += "A"; | |
| 17 bigText.data += "\x1C"; | |
| 18 bigText.data += "\u062A"; | |
| 19 bigText.data += "E"; | |
| 20 bigText.data += "\u062E"; | |
| 21 bigText.data += " "; | |
| 22 bigText.data += "\u202D"; | |
| 23 bigText.data += "X"; | |
| 24 bigText.data += "\x1C"; | |
| 25 bigText.data += "Y"; | |
| 26 root.appendChild(bigText); | |
| 27 | |
| 28 var smallText = document.createTextNode("Z"); | |
| 29 root.appendChild(smallText); | |
| 30 | |
| 31 root.focus(); | |
| 32 | |
| 33 function del() | |
| 34 { | |
| 35 var range = document.createRange(); | |
| 36 range.setStart(root, 0); | |
| 37 range.setEnd(bigText, bigText.data.length); | |
| 38 range.deleteContents(); | |
| 39 } | |
| 40 | |
| 41 del(); | |
| 42 | |
| 43 function finish() { | |
| 44 document.documentElement.removeAttribute('class'); | |
| 45 } | |
| 46 | |
| 47 setTimeout(finish, 0); | |
| 48 } | |
| 49 | |
| 50 </script> | |
| 51 </head> | |
| 52 | |
| 53 <body onload="boom();"></body> | |
| 54 </html> |
