layout/base/crashtests/572582-1.xhtml

Tue, 06 Jan 2015 21:39:09 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Tue, 06 Jan 2015 21:39:09 +0100
branch
TOR_BUG_9701
changeset 8
97036ab72558
permissions
-rw-r--r--

Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.

     1 <html xmlns="http://www.w3.org/1999/xhtml" style="width: 1px">
     2 <head>
     3 <script style="display: none;" id="fuzz1" type="text/javascript">
     4 <![CDATA[
     6 function boom()
     7 {
     8   var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span")
     9   var t1 = document.createTextNode("\uD1B5");
    10   span.appendChild(t1);
    11   var t2 = document.createTextNode("");
    12   span.appendChild(t2);
    13   var t3 = document.createTextNode("\u200Bq");
    14   span.appendChild(t3);
    15   document.documentElement.appendChild(span);
    16   document.documentElement.offsetHeight;
    17   t3.data = "\u062A";
    18 }
    20 window.addEventListener("load", boom, false);
    22 ]]>
    23 </script>
    24 </head>
    25 </html>

mercurial