dom/events/crashtests/422009-1.xhtml

Tue, 06 Jan 2015 21:39:09 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Tue, 06 Jan 2015 21:39:09 +0100
branch
TOR_BUG_9701
changeset 8
97036ab72558
permissions
-rw-r--r--

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

     1 <html xmlns="http://www.w3.org/1999/xhtml">
     2 <head>
     4 <bindings xmlns="http://www.mozilla.org/xbl">
     5   <binding id="g">
     6     <implementation>
     7       <constructor>
     8         throw 3;
     9       </constructor>
    10     </implementation>
    11   </binding>
    12 </bindings>
    14 <script type="text/javascript">
    16 function boom()
    17 {
    18   var HTML_NS = "http://www.w3.org/1999/xhtml";
    19   var span = document.createElementNS(HTML_NS, 'span');
    20   span.style.MozBinding = "url(#g)";
    21   document.removeChild(document.documentElement)
    22   var w = document.createElementNS(HTML_NS, 'body');
    23   w.setAttribute('onload', "/");
    24   document.appendChild(span);
    25 }
    27 </script>
    28 </head>
    30 <body onload="boom();"></body>
    31 </html>

mercurial