tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

clearance-containing-fragmented-float-crash.html (701B)


      1 <!-- quirks mode -->
      2 <meta charset="utf-8">
      3 <title>Should not crash when a clearance frame having a fragmented float is discovered</title>
      4 <link rel="author" title="Ting-Yu Lin" href="mailto:tlin@mozilla.com">
      5 <link rel="author" title="Mozilla" href="https://www.mozilla.org/">
      6 <link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1663232">
      7 
      8 <style>
      9 :not(em) {
     10  border-left: 4px dashed green;
     11  column-width: 0;
     12 }
     13 </style>
     14 <script>
     15 function go() {
     16  b.appendChild(a)
     17 }
     18 </script>
     19 <m>
     20 <details ontoggle="go()" open>
     21 <f>
     22 <menu>U<menu>
     23 <table align="RIGHT">
     24 <caption>
     25 <o>
     26 <ul>
     27 <l>
     28 <li>
     29 <tr>6
     30 <table>
     31 <a>
     32 <details id="b" open>
     33 <summary>
     34 <i id="a">
     35 </summary>
     36 <details style="float: right">