dom/events/crashtests/422009-1.xhtml@6474c204b198
dom/events/crashtests/422009-1.xhtml
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 <html xmlns="http://www.w3.org/1999/xhtml">
2 <head>
4 <bindings xmlns="http://www.mozilla.org/xbl">
5 <binding id="g">
6 <implementation>
7 <constructor>
8 throw 3;
9 </constructor>
10 </implementation>
11 </binding>
12 </bindings>
14 <script type="text/javascript">
16 function boom()
17 {
18 var HTML_NS = "http://www.w3.org/1999/xhtml";
19 var span = document.createElementNS(HTML_NS, 'span');
20 span.style.MozBinding = "url(#g)";
21 document.removeChild(document.documentElement)
22 var w = document.createElementNS(HTML_NS, 'body');
23 w.setAttribute('onload', "/");
24 document.appendChild(span);
25 }
27 </script>
28 </head>
30 <body onload="boom();"></body>
31 </html>
