tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

node-appendchild-crash.html (501B)

      1 <!DOCTYPE html>
      2 <meta charset="utf-8">
      3 <link rel="author" href="mailto:masonf@chromium.org">
      4 <link rel="help" href="https://crbug.com/1210480">
      5 <meta name="assert" content="The renderer should not crash.">
      6 
      7 <iframe id=iframe></iframe>
      8 <select>Text Node
      9  <option id=option></option>
     10 </select>
     11 
     12 <script>
     13  window.onload=function() {
     14    iframe.addEventListener('DOMNodeInsertedIntoDocument',function() {});
     15    option.remove();
     16    iframe.contentDocument.body.appendChild(document.body);
     17  }
     18 </script>