tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

456041.html (456B)

      1 <html>
      2 <head>
      3 <title> Bug 456041 -  Crash [@ nsCellMapColumnIterator::GetNextFrame] with contenteditable, generated content on table and double tbody</title>
      4 <script>
      5 //setTimeout(function() {window.location.reload();}, 500);
      6 </script>
      7 </head>
      8 <body>
      9 <span contenteditable="true"></span>
     10 
     11 <style id="e">body table::after { content:"b";}</style>
     12 
     13 <table>
     14 <script>document.body.offsetHeight;</script>
     15 <tbody></tbody>
     16 <tbody></tbody>
     17 </table>
     18 </body>
     19 </html>