tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

chrome-legacy-propagation-remove-body-crash.html (504B)

      1 <!doctype html>
      2 <title>BODY list-item crash inserting extra BODY</title>
      3 <link rel="help" href="https://crbug.com/1298917">
      4 <style>
      5  body {
      6    display: list-item;
      7  }
      8  div {
      9    /* Multicol and table display to trigger legacy layout */
     10    display: table-row-group;
     11    column-count: 1;
     12  }
     13 </style>
     14 <body>
     15  <p>Pass if no crash.</p>
     16  <div></div>
     17 </body>
     18 <script>
     19  document.documentElement.offsetTop;
     20  document.documentElement.insertBefore(document.createElement("body"), document.body);
     21 </script>