tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

gap-decorations-009-crash.html (592B)


      1 <!DOCTYPE html>
      2 <html>
      3 <meta charset="UTF-8">
      4 <title>Crash test found by fuzzer.</title>
      5 <link rel="help" href="https://drafts.csswg.org/css-gaps-1/">
      6 <link rel="author" title="Javier Contreras" href="mailto:javiercon@microsoft.com">
      7 <style>
      8    p {
      9        transition: column-rule-width 0.4s ease-in-out;
     10    }
     11 </style>
     12 <p id="test">This is a very long string like the one the fuzzer used</p>
     13 <script>
     14    window.addEventListener('load', () => {
     15        const p = document.getElementById('test');
     16        p.style.setProperty('column-rule-width', 'repeat(4,50px)');
     17    });
     18 </script>
     19 </html>