The Tor Browser / file revision

 <canvas dir=auto><p id=test1> 

 nt/b|+K	 E:</p>

     <svg>

         <defs id=test2>~ N LRWue`N6g J`NfT Ai0 BG  q QPX6 ~	 #A?ORD

             <span><metadata id=test4><use id=test3>>>><script>

 var docElement = document.body ? document.body : document.documentElement;

 document.addEventListener("DOMContentLoaded", CFcrash, false);

 function CFcrash() {

 try { test1.parentNode.removeChild(test1); } catch(e) {}

 try { test2.innerHTML = ''; } catch(e) {}

 try { test3.outerHTML = test4.outerHTML; } catch(e) {}

 }</script>