tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

inert-br-child.html (356B)


      1 <!DOCTYPE html>
      2 <!-- Test for crash when inert br gains illegal child -->
      3 <html>
      4 <dialog></dialog>
      5 <br>
      6 
      7 <script>
      8 requestAnimationFrame(() => {
      9  requestAnimationFrame(() => {
     10    document.querySelector('dialog').showModal();
     11    const br = document.querySelector('br');
     12    br.appendChild(document.createElement('fieldset'));
     13  });
     14 });
     15 </script>
     16 
     17 </html>