tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

1326194-1.html (468B)

      1 <!DOCTYPE HTML>
      2 <html>
      3 <head>
      4 <script type="application/javascript">
      5 
      6 // Crashes if 'target' doesn't get properly unlinked in nsINode::LastRelease
      7 
      8 function crash() {
      9 var target = document.getElementById('target');
     10 var io = new IntersectionObserver(function () { }, { });
     11 io.observe(target);
     12 document.body.removeChild(target);
     13 }
     14 
     15 </script>
     16 </head>
     17 <body onload="crash()">
     18 <div id="target" style="background: red; width: 50px; height: 50px"></div>
     19 </body>
     20 </html>