layout/base/crashtests/379105-1.xhtml

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

     1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
     2 <head>
     3 <bindings xmlns="http://www.mozilla.org/xbl">
     5 <binding id="x"><content>
     6   <zzz><children/></zzz>
     7 </content></binding>
     9 <binding id="empty"><content>
    10 </content></binding>
    12 </bindings>
    14 <script>
    15 <![CDATA[
    17 var xbltarget;
    19 function boom1()
    20 {
    21   xbltarget = document.getElementById("xbltarget");
    22   xbltarget.style.MozBinding = "url('#x')";
    23   setTimeout(boom2, 0);
    24 }
    26 function boom2()
    27 {
    28   var nodes = SpecialPowers.unwrap(SpecialPowers.wrap(document).getAnonymousNodes(xbltarget));
    29   if (!nodes) {
    30     setTimeout(boom2, 10);
    31     return;
    32   }
    33   var anox = nodes[0];
    34   var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "frame")
    35   frame.src = "data:text/html,<html><body>Hi!</body></html>";
    36   anox.appendChild(frame);
    37   xbltarget.style.MozBinding = "url('#empty')";
    39   document.documentElement.removeAttribute("class");
    40 }
    42 ]]>
    43 </script>
    44 </head>
    45 <body onload="boom1()">
    46 <div id="xbltarget"></div>
    47 </body>
    48 </html>

mercurial