Wed, 31 Dec 2014 06:09:35 +0100
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 <!doctype html>
2 <html>
3 <head><title>Bug 718516</title>
4 <script>
5 function start ()
6 {
7 firstDirElement = document.createElement('dir');
8 firstDirElement.style.cssText = '-moz-stack-sizing: ignore;' +
9 ' -moz-column-width: 16385px;';
10 textPathElement = document
11 .createElementNS('http://www.w3.org/2000/svg', 'textPath');
12 firstDirElement.appendChild(textPathElement);
13 textPathParent = textPathElement.parentElement;
14 firstDivElement = document.createElement('div');
15 document.body.appendChild(firstDivElement);
16 centerElement = document.createElement('center');
17 firstDivElement.appendChild(centerElement);
18 firstIFrameElement = document.createElement('iframe');
19 firstIFrameElement.src = 'data:text/html,%3Cdatalist%20id%3D%27'
20 + 'element0%27%3E%3Cscript%20id%3D%27element2%27%3Ex%20x';
21 firstIFrameElement.id = 'ifr37311';
22 centerElement.ownerDocument.documentElement
23 .appendChild(firstIFrameElement);
24 window.setTimeout('start_dataiframe0()', 100);
25 }
27 function start_dataiframe0 ()
28 {
29 element2 = centerElement.ownerDocument.getElementById('ifr37311')
30 .contentDocument.getElementById('element2');
31 secondDirElement = document.createElement('dir');
32 secondDirElement.style.cssText =
33 'visibility: inherit;-moz-column-count: 32771;';
34 feOffsetElement = document
35 .createElementNS('http://www.w3.org/2000/svg', 'feOffset');
36 centerElement.style.position = 'absolute';
37 firstIFrameElement.id = 'ifr36578';
38 element0 = feOffsetElement.ownerDocument.getElementById('ifr36578')
39 .contentDocument
40 .getElementById('element0');
41 firstIFrameElement = document.createElement('iframe');
42 element0Clone = element0.cloneNode(true);
43 videoElement = document.createElement('video');
44 firstDivParent = firstDivElement.offsetParent;
45 firstIFrameElement.id = 'ifr9261';
46 element0Clone.ownerDocument.documentElement
47 .appendChild(firstIFrameElement);
48 window.setTimeout('start_dataiframe4()', 100);
49 }
51 function start_dataiframe4 ()
52 {
53 documentElement = element0Clone.ownerDocument
54 .getElementById('ifr9261').contentDocument.documentElement;
55 textPathParent.appendChild(videoElement);
56 centerElement.appendChild(element2.lastChild);
57 documentElement.appendChild(secondDirElement);
58 firstDirElement.style.position = 'relative';
59 document.body.appendChild(firstDirElement);
60 firstDirElement.appendChild(firstDivElement);
61 secondDirElement.appendChild(firstDivParent);
62 }
63 </script>
64 </head>
65 <body onload="start()">
66 A
67 </body>
68 </html>