tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

nth-of-namespace-class-invalidation-crash.html (495B)

      1 <!DOCTYPE html>
      2 <link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1903671">
      3 <style>
      4 *|*:nth-child(+0n of S) { color: red }
      5 </style>
      6 <script>
      7 document.addEventListener("DOMContentLoaded", () => {
      8  let a = document.createElementNS("http://www.w3.org/1999/xhtml", "details")
      9  let b = document.createElementNS("http://www.w3.org/1999/xhtml", "summary")
     10  a.appendChild(b)
     11  document.documentElement.appendChild(a)
     12  b.offsetTop;
     13  b.setAttributeNS("h", "class", "")
     14 })
     15 </script>