The Tor Browser: layout/base/crashtests/488390-1.xhtml@ca08bd8f51b2

     1 <html xmlns="http://www.w3.org/1999/xhtml">

     2 <head>

     3 <script type="text/javascript">

     5 function boom()

6 {

     7   document.getElementById("select").removeAttribute("multiple");

     8   // Trigger a reflow

     9   document.body.style.width = 0;

    10   // And flush layout

    11   document.body.offsetWidth;

    12 }

    14 </script>

    15 </head>

    17 <body onload="boom();"><span>&#x202E;text text text text text&#x202C;<span><dir/></span><span><tr><select id="select" multiple="multiple"/></tr></span></span></body>

    18 </html>

The Tor Browser / file revision

layout/base/crashtests/488390-1.xhtml@ca08bd8f51b2

layout/base/crashtests/488390-1.xhtml