tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

embed-named-attribute-detached-context-crash.html (258B)

      1 <!DOCTYPE html>
      2 <body>
      3 <iframe id="i"></iframe>
      4 <script>
      5 let e = i.contentDocument.createElement("embed");
      6 i.contentDocument.body.appendChild(e);
      7 i.remove();
      8 
      9 // These should not crash.
     10 e.tryToGetAnAttribute;
     11 e.tryToSetAnAttribute = "foo";
     12 </script>
     13 </body>