tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

bug_502091_iframe.html (367B)

      1 <html>
      2 <head>
      3 <title>Crash [@ nsContentSink::ProcessHeaderData] with meta in innerHTML</title>
      4 </head>
      5 <body>
      6 <div id="testdiv">
      7  testdiv
      8  </div>
      9 <script>
     10 var x = document.createElement("div");
     11 x.innerHTML = '<meta http-equiv="Content-Type" content="text/html;"></meta>';
     12 document.getElementById("testdiv").appendChild(x);
     13 </script>
     14 some text here
     15 </body>
     16 </html>