The Tor Browser: diff editor/libeditor/html/crashtests/456727-1.html

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/editor/libeditor/html/crashtests/456727-1.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,8 @@
     1.4 +<html>
     1.5 +<BODY onload="
     1.6 +document.designMode='on';
     1.7 +document.replaceChild(document.createElement('HTML'), document.firstChild);
     1.8 +document.queryCommandValue('backcolor');
     1.9 +">
    1.10 +</body>
    1.11 +</html>
    1.12 \ No newline at end of file

The Tor Browser / file diff

diff: editor/libeditor/html/crashtests/456727-1.html

editor/libeditor/html/crashtests/456727-1.html