layout/generic/crashtests/868906.html@6474c204b198
layout/generic/crashtests/868906.html
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
1 <!DOCTYPE html>
2 <html class="reftest-wait">
3 <head>
4 <meta charset="UTF-8">
5 <script>
7 function boom()
8 {
9 var root = document.documentElement;
10 while(root.firstChild) { root.removeChild(root.firstChild); }
11 root.appendChild(document.createElement("body"));
12 root.offsetHeight;
14 var bigText = document.createTextNode("");
15 bigText.data += "\u202D";
16 bigText.data += "A";
17 bigText.data += "\x1C";
18 bigText.data += "\u062A";
19 bigText.data += "E";
20 bigText.data += "\u062E";
21 bigText.data += " ";
22 bigText.data += "\u202D";
23 bigText.data += "X";
24 bigText.data += "\x1C";
25 bigText.data += "Y";
26 root.appendChild(bigText);
28 var smallText = document.createTextNode("Z");
29 root.appendChild(smallText);
31 root.focus();
33 function del()
34 {
35 var range = document.createRange();
36 range.setStart(root, 0);
37 range.setEnd(bigText, bigText.data.length);
38 range.deleteContents();
39 }
41 del();
43 function finish() {
44 document.documentElement.removeAttribute('class');
45 }
47 setTimeout(finish, 0);
48 }
50 </script>
51 </head>
53 <body onload="boom();"></body>
54 </html>
