tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

contain-nested-crash-004.html (312B)

      1 <!DOCTYPE html>
      2 <link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1439692">
      3 <style>
      4 body, fieldset { contain: strict; }
      5 </style>
      6 <script>
      7 function crash() {
      8  document.body.offsetTop;
      9  document.body.appendChild(document.createElement("fieldset"));
     10 }
     11 </script>
     12 <body onload="crash()">