tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

325218.xhtml (902B)


      1 <window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul"
      2        xmlns:html="http://www.w3.org/1999/xhtml"
      3        class="reftest-wait"
      4        title="Testcase bug 325218 - Crash with evil xul testcase, using box, tooltip, object, etc">
      5 <html:span>
      6  <box>
      7    <tooltip/>
      8  </box>
      9 
     10  <html:td/><html:object style="display: none;">This should not crash Mozilla
     11      <html:span style="display: table;"/>
     12  </html:object>
     13 </html:span>
     14 
     15 <html:script>
     16 function doe(){
     17  document.getElementsByTagName('html:object')[0].removeAttribute('style');
     18  document.getElementsByTagName('html:object')[0].offsetHeight;
     19  document.getElementsByTagName('html:span')[1].removeAttribute('style');
     20  document.getElementsByTagName('html:object')[0].setAttribute('style', 'text-decoration: underline');
     21  document.documentElement.removeAttribute("class");
     22 }
     23 setTimeout(doe,50);
     24 </html:script>
     25 </window>