tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

createContextualFragment-in-detached-xml-document-crash.html (352B)

      1 <!DOCTYPE html>
      2 <body>
      3 <iframe id="i" src="resources/dummy-xml.xml"></iframe>
      4 <script>
      5 window.onload = () => {
      6  let i = document.getElementById("i");
      7  var range = i.contentDocument.createRange();
      8  range.setStart(i.contentDocument.firstElementChild, 0);
      9  i.remove();
     10 
     11  range.createContextualFragment('<p>Should not crash</p>');
     12 }
     13 </script>
     14 </body>