tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

inline-splitting-crash.html (424B)

      1 <!DOCTYPE html>
      2 <link rel="help" href="https://crbug.com/1175425">
      3 
      4 <div id="container" style="border-collapse:collapse;">
      5  <div id="insertBefore"></div>
      6  <div style="display:table-row-group;"></div>
      7  <div id="victim" style="border:solid; display:table-row-group;">
      8    <div style="display:table-cell;"></div>
      9  </div>
     10 </div>
     11 
     12 <script>
     13  document.body.offsetTop;
     14  container.insertBefore(insertBefore, victim)
     15 </script>