tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

text-autospace-shape-cache-crash.html (347B)


      1 <!DOCTYPE html>
      2 <meta charset="utf-8">
      3 <span></span>
      4 <div>X</div>
      5 <div>X</div>
      6 <script>
      7 document.body.offsetHeight;
      8 const span = document.querySelector('span');
      9 const divs = Array.prototype.slice.call(document.querySelectorAll('div'));
     10 for (const e of divs) {
     11  const n = span.cloneNode(span);
     12  e.appendChild(n);
     13  e.offsetHeight;
     14 }
     15 </script>