Fri, 16 Jan 2015 04:50:19 +0100
Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32
1 <HTML>
2 <HEAD>
3 <title>Testcase bug 317876 - Crash with evil testcase on hovering after reload with display:table-row, display:inherit</title>
4 </HEAD>
5 <BODY>
6 <div onmouseover="this.removeAttribute('style')" style="width: 20px; height: 30px;">
7 <div style="display: table-row;">
8 <span style="display: table-row;">
9 </span>
10 <span style="display: inherit;">
11 Hovering over this should not crash Mozilla
12 </span>
13 </div>
14 </div>
15 </BODY>
16 </HTML>