The Tor Browser: layout/base/crashtests/572582-1.xhtml@b8a032363ba2

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

     1 <html xmlns="http://www.w3.org/1999/xhtml" style="width: 1px">

     2 <head>

     3 <script style="display: none;" id="fuzz1" type="text/javascript">

     4 <![CDATA[

     6 function boom()

7 {

     8   var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span")

     9   var t1 = document.createTextNode("\uD1B5");

    10   span.appendChild(t1);

    11   var t2 = document.createTextNode("");

    12   span.appendChild(t2);

    13   var t3 = document.createTextNode("\u200Bq");

    14   span.appendChild(t3);

    15   document.documentElement.appendChild(span);

    16   document.documentElement.offsetHeight;

    17   t3.data = "\u062A";

    18 }

    20 window.addEventListener("load", boom, false);

    22 ]]>

    23 </script>

    24 </head>

    25 </html>

The Tor Browser / file revision