Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 <html><head><title>Testcase bug 348126 - Crash [@ nsImageFrame::SourceRectToDest] on reload and removing table-caption styles</title>
3 <script>
4 function removestyles(i){
6 document.getElementsByTagName('table')[0].removeAttribute('style');
8 document.getElementsByTagName('object')[0].removeAttribute('style');
10 document.getElementsByTagName('table')[1].removeAttribute('style');
11 document.location.reload();
12 }
14 setTimeout(removestyles,500,0);
15 </script>
16 </head><body>
17 Mozilla should not crash on reload on this page<br>
18 <object><table style="display: table-caption;">
19 <tbody><tr><td></td></tr></tbody>
20 </table><object style="display: table-caption;">
21 </object><table style="display: table-row-group;">
22 <tbody><tr><td>
23 <img src="348126-1.gif">
24 </td></tr></tbody></table>
25 <img src="348126-1.gif">
26 </object>
28 </body></html>