tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

col_span_dynamic_crash.html (360B)

      1 <!doctype html>
      2 <style>
      3  col {
      4    border:2px solid green;
      5  }
      6 </style>
      7 <table style="border-collapse:collapse">
      8  <colgroup>
      9    <col span=3 id="target">
     10  </colgroup>
     11  <tbody>
     12    <tr>
     13      <td>a</td>
     14      <td>b</td>
     15    </tr>
     16  </tbody>
     17 </table>
     18 <script>
     19  document.body.offsetTop;
     20  document.querySelector("#target").setAttribute("span", 0);
     21 </script>