layout/mathml/crashtests/307839-2.xhtml@97036ab72558
layout/mathml/crashtests/307839-2.xhtml
Tue, 06 Jan 2015 21:39:09 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Tue, 06 Jan 2015 21:39:09 +0100
- branch
- TOR_BUG_9701
- changeset 8
- 97036ab72558
- permissions
- -rw-r--r--
Conditionally force memory storage according to privacy.thirdparty.isolate;
This solves Tor bug #9701, complying with disk avoidance documented in
https://www.torproject.org/projects/torbrowser/design/#disk-avoidance.
1 <?xml version="1.0"?>
2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0//EN" "http://www.w3.org/TR/MathML2/dtd/xhtml-math11-f.dtd" [
3 <!ENTITY mathml "http://www.w3.org/1998/Math/MathML">
4 ]>
5 <html xmlns="http://www.w3.org/1999/xhtml">
7 <head>
8 <title>Testcase bug - Evil mrow:hover testcase crashes Mozilla</title>
9 <style type="text/css">
10 #h:hover{display:block;}
11 </style>
12 </head>
13 <body onload="document.getElementById('mrow').setAttribute('id', 'h');">
14 <math mode="display" xmlns="http://www.w3.org/1998/Math/MathML">
15 <mover>
16 <mrow id="mrow">hovering over this should not crash Mozilla</mrow>
17 <mover>
18 <mo>10</mo>
19 <mrow>times</mrow>
20 </mover>
21 </mover>
22 </math>
23 </body>
24 </html>
