dom/xbl/crashtests/406904-2.xhtml

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xbl="http://www.mozilla.org/xbl">
     2 <head>
     4 <xbl:bindings xmlns="http://www.mozilla.org/xbl"><xbl:binding id="a"><xbl:content>
     5 <span><span></span><xbl:children/></span>
     6 </xbl:content></xbl:binding></xbl:bindings>
     8 <script type="text/javascript">
    10 function boom()
    11 {
    12   var s = document.getElementById("s");
    13   var anon = document.getAnonymousNodes(s)[0];
    15   while (anon.firstChild)
    16     anon.removeChild(anon.firstChild);
    18   document.documentElement.style.MozBinding = "url('data:text/xml,%3Cbindings%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%3E%3Cbinding%20id%3D%22foo%22%3E%3Ccontent%3EQ%3C%2Fcontent%3E%3C%2Fbinding%3E%3C%2Fbindings%3E%0A')";
    19 }
    21 </script>
    22 </head>
    24 <body onload="boom();"><span id="s" style="-moz-binding: url('#a');"></span></body>
    25 </html>

mercurial