content/base/crashtests/561981-1-iframe.xhtml@6474c204b198
content/base/crashtests/561981-1-iframe.xhtml
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 <html xmlns="http://www.w3.org/1999/xhtml">
2 <head>
3 <script>
4 <![CDATA[
6 var i = 0;
8 function init()
9 {
10 targetWindow = window.frames[0];
11 targetDocument = targetWindow.document;
12 targetDocument.body.appendChild(targetDocument.importNode(document.getElementById('rootish'), true));
13 targetDocument.designMode = 'on';
14 setTimeout(boom, 30);
15 }
17 function boom()
18 {
19 var r = targetDocument.createRange();
20 r.setStart(targetDocument.getElementById("bar"), 0);
21 r.setEnd(targetDocument.getElementById("baz").firstChild, 0);
22 targetWindow.getSelection().addRange(r);
23 targetDocument.execCommand("indent", false, null);
24 setTimeout(whack, 300);
25 }
27 function whack()
28 {
29 if (++i > 100) return;
30 document.documentElement.style.MozBinding = 'url("data:text/xml,' + encodeURIComponent("<bindings xmlns=\"http://www.mozilla.org/xbl\"><binding id=\"foo\" g=\""+Math.random()+"\"><content>\n<\/content><\/binding><\/bindings>\n") + '")';
31 setTimeout(bonk, 10);
32 }
34 function bonk()
35 {
36 document.getElementById("i").style.MozBinding = 'url("data:text/xml,' + encodeURIComponent("<bindings xmlns=\"http://www.mozilla.org/xbl\"><binding id=\"foo\" g=\""+Math.random()+"\"><content>\n\n<\/content><\/binding><\/bindings>\n") + '")';
37 document.documentElement.style.MozBinding = 'url("data:text/xml,' + encodeURIComponent("<bindings xmlns=\"http://www.mozilla.org/xbl\"><binding id=\"foo\" g=\""+Math.random()+"\"><content><iframe xmlns=\"http://www.w3.org/1999/xhtml\" src=\"data:text/html,\" style=\"width: 95%; height: 500px;\"><\/iframe><\/content><\/binding><\/bindings>\n") + '")';
38 setTimeout(whack, 10);
39 }
41 ]]>
42 </script>
43 </head>
45 <body onload="init()">
47 <iframe id="i" src="data:text/html," style="width: 95%; height: 500px;"/>
49 <div id="rootish">
50 <div>Foo</div>
51 <div id="bar">Bar</div>
52 <div><select><option id="baz">baz</option></select></div>
53 </div>
55 </body>
56 </html>
