tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

slot-content-visibility-5-crash.html (1030B)


      1 <!DOCTYPE html>
      2 <link rel=author href="mailto:jarhar@chromium.org">
      3 <link rel=help href="https://bugs.chromium.org/p/chromium/issues/detail?id=1221121">
      4 
      5 <style>
      6 </style>
      7 <style>
      8 </style>
      9 <style>
     10 </style>
     11 <div>
     12  <template shadowrootmode=open>
     13    <slot style="content-visibility: hidden; display: block"></slot>
     14  </template>
     15 <embed id="I7" class= accesskey="h">
     16 <meter class="C8">a
     17 <script>
     18  document.head.appendChild(document.createElement("style"));
     19  const styleSheet = document.styleSheets[document.styleSheets.length - 1];
     20  styleSheet.insertRule(":root{}");
     21  const styleSheet0 = document.styleSheets[0];
     22  const test2 = document.getElementById("I7");
     23  test2.className += "fuzzClass5";
     24  styleSheet0.insertRule('.C8 {}');
     25  try {
     26    test2.style.setProperty();
     27  } catch(e) {}
     28  document.styleSheets[3].disabled = true;
     29  test2.style['border-right-color-value'] = '';
     30  styleSheet0.insertRule('.foo { color: blue }', styleSheet0.cssRules.length);
     31  document.execCommand("false");
     32  document.designMode = "on";
     33 </script>