tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

image-with-detached-text-child.html (547B)

      1 <!DOCTYPE html>
      2 <html class="test-wait">
      3 <body>
      4 <div style="display:none">
      5  <map name="map2">x</map>
      6 </div>
      7 <img usemap="#map2">
      8 <span class=removeme></span>
      9 </body>
     10 <style>
     11 /* The empty declarations are needed to repro the crash */
     12 div + div { }
     13 .doesnotexist + div { }
     14 </style>
     15 
     16 <script>
     17 document.addEventListener('DOMContentLoaded', () => {
     18  requestAnimationFrame(() => {
     19    requestAnimationFrame(() => {
     20      document.querySelector('.removeme').remove();
     21      document.documentElement.className = '';
     22    });
     23  });
     24 });
     25 </script>
     26 
     27 </html>