tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

1422226.html (1286B)

      1 <style id="htmlvar00001">
      2 * {
      3 filter: saturate(1) hue-rotate(0deg);
      4 marker-mid: url()
      5 }
      6 </style>
      7 <script>
      8 function jsfuzzer() {
      9 try { var var00078 = window.find("foo",true,true); } catch(e) { }
     10 try { htmlvar00004.setAttribute("onselect", "eventhandler2()"); } catch(e) { }
     11 try { htmlvar00004.selectionStart = 1; } catch(e) { }
     12 try { svgvar00030.addEventListener("DOMSubtreeModified", eventhandler5); } catch(e) { }
     13 }
     14 function eventhandler1() {
     15 try { var var00098 = document.createElement("select"); } catch(e) { }
     16 try { htmlvar00001.appendChild(var00098); } catch(e) { }
     17 }
     18 function eventhandler2() {
     19 try { htmlvar00015.href = "3" } catch(e) { }
     20 try { svgvar00008.before(svgvar00013); } catch(e) { }
     21 try { var var00014 = window.getSelection(); } catch(e) { }
     22 try { var00014.setBaseAndExtent(htmlvar00011,0,htmlvar00010,0); } catch(e) { }
     23 try { var00014.collapseToStart(); } catch(e) { }
     24 }
     25 function eventhandler5() {
     26 try { svgvar00001.addEventListener("DOMNodeRemoved", eventhandler1); } catch(e) { }
     27 }
     28 </script>
     29 <body onload=jsfuzzer()>
     30 <input id="htmlvar00004">
     31 <svg id="svgvar00001">
     32 <marker>
     33 <meshgradient id="svgvar00008">
     34 <foreignObject id="svgvar00013">
     35 <discard id="svgvar00030"/>
     36 <a id="htmlvar00010" contenteditable="true"></a>
     37 <a id="htmlvar00011">
     38 <base id="htmlvar00015">