tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

sandbox-toggle-in-inactive-document-crash.html (178B)

      1 <body>
      2 <iframe id="i"></iframe>
      3 <script>
      4 var saved_i = i;
      5 var saved_i_doc = i.contentDocument;
      6 i.remove();
      7 saved_i_doc.adoptNode(saved_i);
      8 saved_i.sandbox.toggle("1");
      9 </script>