layout/generic/crashtests/660416.html@44a2da4a2ab2
layout/generic/crashtests/660416.html
Fri, 16 Jan 2015 04:50:19 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Fri, 16 Jan 2015 04:50:19 +0100
- branch
- TOR_BUG_9701
- changeset 13
- 44a2da4a2ab2
- permissions
- -rw-r--r--
Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <script>
6 function boom()
7 {
8 document.documentElement.offsetHeight;
9 var n = document.getElementById("a").firstChild;
10 n.data = "";
11 n.data = "z";
12 }
14 </script>
15 </head>
16 <body onload="boom();" style="-moz-column-count: 3;"><span id="a">x‮</span><span>y</span></body>
17 </html>
