1430589-1.html (1402B)
1 <html class="reftest-wait"><head> 2 <meta http-equiv="content-type" content="text/html; charset=UTF-8"> 3 <style> 4 :root { 5 flex-wrap: wrap-reverse; 6 } 7 menuitem { 8 -webkit-mask-image: url(data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7); 9 } 10 11 * { 12 margin-right: -1px; 13 display: -webkit-box; 14 overflow: scroll; 15 } 16 17 18 .css1 { 19 -webkit-border-bottom-left-radius: 10px; 20 } 21 22 23 </style> 24 <script> 25 function BOOM(){ 26 setTimeout(() => { 27 var elem = document.getElementById("vuln"); 28 elem.style.width = 600; 29 elem.style.height = 600; 30 window.requestAnimationFrame(() => { 31 window.requestAnimationFrame(() => { 32 document.documentElement.removeAttribute("class"); 33 }); 34 }); 35 }, 0); 36 } 37 38 document.addEventListener("MozReftestInvalidate", BOOM); 39 //window.addEventListener("load", BOOM); 40 </script></head> 41 42 <body> 43 <footer> 44 <textarea id="vuln" style="width: 500px; height: 500px;">Ashitaka</textarea> 45 </footer> 46 <menu> 47 <menuitem> 48 <iframe></iframe> 49 </menuitem></menu> 50 <menuitem> 51 <hr> 52 <dialog class="css1"></dialog> 53 54 55 </menuitem></body></html>