tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

307839-2.xhtml (700B)

      1 <?xml version="1.0"?>
      2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1 plus MathML 2.0//EN" "http://www.w3.org/TR/MathML2/dtd/xhtml-math11-f.dtd" [
      3  <!ENTITY mathml "http://www.w3.org/1998/Math/MathML">
      4 ]>
      5 <html xmlns="http://www.w3.org/1999/xhtml">
      6 
      7 <head>
      8 <title>Testcase bug - Evil mrow:hover testcase crashes Mozilla</title>
      9 <style type="text/css">
     10 #h:hover{display:block;}
     11 </style>
     12 </head>
     13 <body onload="document.getElementById('mrow').setAttribute('id', 'h');">
     14 <math mode="display" xmlns="http://www.w3.org/1998/Math/MathML">
     15 <mover>
     16  <mrow id="mrow">hovering over this should not crash Mozilla</mrow>
     17  <mover>
     18    <mo>10</mo>
     19    <mrow>times</mrow>
     20  </mover>
     21 </mover>
     22 </math>
     23 </body>
     24 </html>