tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

slot-dir-attach-child-crash.html (498B)

      1 <!DOCTYPE html>
      2 <link rel=author href="mailto:myid.shin@igalia.com">
      3 <link rel=help href="https://bugs.chromium.org/p/chromium/issues/detail?id=1309343">
      4 
      5 <datalist id="move">
      6  <option dir="rtl">
      7    <select id="select"></select>
      8  </option>
      9 </datalist>
     10 <svg>
     11  <tspan id="tspan1"/><use xlink:href="#tspan1"/>
     12 </svg>
     13 <script>
     14  onload = () => {
     15    document.getElementById("select").appendChild(document.createElement("ol"));
     16    document.getElementById("tspan1").appendChild(move);
     17  }
     18 </script>