content/xul/content/crashtests/431906-1-inner.xul
author David Mandelin <dmandelin@mozilla.com>
Mon, 09 Aug 2010 18:29:34 -0700
changeset 53358 688ca6c81137c6972b5a7f172394c7b4d332e93d
parent 27799 9901f6f21c1cb5a6ee6a332b97a95259fd9f26a6
child 219873 afcb3af79d09513b2772c629c23a0d9f7b7437b4
permissions -rw-r--r--
[JAEGER] Bug 585801 trial fix: innerize object passed as scope chain for JS evaluation

<html xmlns="http://www.w3.org/1999/xhtml">
<colgroup id="a" command="a">
<box xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
<box id="a" command="a"/>
<box id="a" command="a"/>
</box>
</colgroup>
<script><![CDATA[
function doe(){
document.getElementsByTagName('*')[1].setAttribute('id','');
document.getElementsByTagName('*')[1].setAttribute('xmlns', '');
document.getElementsByTagName('*')[3].setAttribute('id','');

document.getElementsByTagName('*')[4].removeAttribute('xmlns');
document.getElementsByTagName('*')[4].setAttribute('width', '1px');
}
setTimeout(doe,100);
]]></script>
</html>