content/canvas/crashtests/745699-1.html

Tue, 06 Jan 2015 21:39:09 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Tue, 06 Jan 2015 21:39:09 +0100
branch
TOR_BUG_9701
changeset 8
97036ab72558
permissions
-rw-r--r--

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

     1 <!DOCTYPE html>
     2 <html>
     3 <head>
     4 <style>
     5 @font-face {
     6   font-family: "z";
     7   src: url(invalid);
     8 }
     9 </style>
    11 <script>
    12 function boom()
    13 {
    14   var ctx = document.querySelector("canvas").getContext('2d');
    15   ctx.font = "10px serif";
    16   document.querySelector("style").appendChild(document.createTextNode(" "));
    17   ctx.measureText("123");
    18 }
    19 </script>
    20 </head>
    22 <body onload="boom();">
    23 <canvas width="100" height="100"></canvas>
    24 </body>
    25 </html>

mercurial