tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

grid-table-cell-001-crash.html (755B)

      1 <!DOCTYPE html>
      2 <html>
      3 <head>
      4 <link rel="author" title="Daniel Holbert" href="mailto:dholbert@mozilla.com">
      5 <link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1232875">
      6 <script>
      7 
      8 function boom()
      9 {
     10    document.documentElement.offsetHeight;
     11    document.getElementsByTagName("table")[0].style.inlineSize = "1px";
     12    document.documentElement.offsetHeight;
     13    document.getElementsByTagName("td")[0].style.display = "inline-grid";
     14    document.documentElement.offsetHeight;
     15 }
     16 
     17 </script>
     18 </head>
     19 
     20 <body onload="boom();">
     21 
     22 <table style="writing-mode: vertical-rl; table-layout: fixed;">
     23    <caption style="float: inline-end;">A B</caption>
     24    <tbody><tr><td></td></tr></tbody>
     25 </table>
     26 
     27 <div style="height: 3000px;"></div>
     28 
     29 </body>
     30 </html>