tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

document-destroyed-crash.html (624B)

      1 <!doctype html>
      2 <title>&lt;img> loading in destroyed document</title>
      3 <iframe></iframe>
      4 <script>
      5 onload = function() {
      6  const img = new Image();
      7  img.onload = function() {
      8    const iframe = document.querySelector('iframe');
      9    iframe.contentDocument.createElement('div').innerHTML =
     10      `<picture>
     11         <source srcset="nonexistent.png">
     12         <img src="data:image/gif;base64,R0lGODlhCgAKAIAAAP/MAAAAACH5BAAAAAAALAAAAAAKAAoAAAIIhI+py+0PYysAOw==">
     13       </picture>`;
     14    iframe.remove();
     15  };
     16  img.src = 'data:image/gif;base64,R0lGODlhCgAKAIAAAP/MAAAAACH5BAAAAAAALAAAAAAKAAoAAAIIhI+py+0PYysAOw==';
     17 };
     18 </script>