Sat, 03 Jan 2015 20:18:00 +0100
Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <script type="text/javascript">
6 function boom()
7 {
8 var table = document.createElement("table");
9 document.body.appendChild(table);
10 table.contentEditable = "true";
11 table.focus();
12 try {
13 // This will throw, since it's attempting to inject a list inside a table
14 document.execCommand("insertunorderedlist", false, null);
15 } catch (e) {}
16 }
18 </script>
19 </head>
21 <body onload="boom();"></body>
22 </html>