The Tor Browser: layout/tables/crashtests/339130-1.html@44a2da4a2ab2

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

     1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

     2 <html>

     4 <head>

     5 <script>

     7 function boom()

8 {

     9   var table = document.getElementById("table");

    11   table.insertBefore(document.createElement("thead"), document.getElementById("A"));

    13   var tb2 = document.createElement("tfoot");

    14   var tr1 = document.createElement("tr");

    15   tb2.appendChild(tr1);

    16   table.appendChild(tb2);

    18   var tr = document.createElement("tr");

    19   var td = document.createElement("td");

    20   td.appendChild(document.createTextNode("td"));

    21   td.setAttribute("rowspan", 0);

    22   tr.appendChild(td);

    23   document.getElementById("B").appendChild(tr);

    24 }

    26 </script>

    27 </head>

    28 <body onload="boom();">

    30 <table id="table">

    31   <tfoot id="A"><tr><td>td</td></tr></tfoot>

    32   <tfoot id="B"><tr><td>td</td></tr></tfoot>

    33   <thead></thead>

    34 </table>

    36 </body>

    37 </html>

The Tor Browser / file revision