tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

altering-dom-crash.html (464B)

      1 <!DOCTYPE html>
      2 <title>CSS Text Test: Altering the DOM generates empty text elements that cause line-breaking to crash</title>
      3 <link rel="help" href="https://crbug.com/1128571">
      4 <style>
      5    body {
      6        width: 5pt;
      7        hyphens: none;
      8    }
      9 </style>
     10 <body onload=jsfuzzer()>
     11    <table id="table1">x</table>
     12    <content contenteditable="plaintext-only">
     13 </body>
     14 <script>
     15    function jsfuzzer() {
     16        document.all[0].appendChild(table1);
     17    }
     18 </script>