The Tor Browser: layout/tables/crashtests/339315-1.html@44a2da4a2ab2

Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32

     1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

     2 <html>

     4 <head>

     5 <script>

     7 function boom() {

     8   var table = document.getElementById("table");

    10   var doomed = document.getElementById("doomed");

    11   doomed.parentNode.removeChild(doomed);

    13   var colgroup1 = document.createElement("colgroup");

    14   table.appendChild(colgroup1);

    16   var thead = document.createElement("thead");

    17   var tr = document.createElement("tr");

    18   var td = document.createElement("td");

    19   td.setAttribute("colspan", 0);

    20   tr.appendChild(td);

    21   thead.appendChild(tr);

    22   table.insertBefore(thead, colgroup1);

    24   colgroup1.parentNode.removeChild(colgroup1);

    26   var colgroup2 = document.createElement("colgroup");

    27   table.appendChild(colgroup2);

    28 }

    30 </script>

    31 </head>

    33 <body onload="boom();">

    35 <table id="table"><tbody><tr id="doomed"><td>x</tr></tbody></table>

    37 </body>

    38 </html>

The Tor Browser / file revision