wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-24 01:17:34 +09:00
Code Issues Projects Releases Packages Wiki Activity

import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo

Browse source
This commit is contained in:
Roy Tam 2018-01-19 03:59:58 +08:00
commit dcd9973243
150858 changed files with 23884658 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

62
layout/reftests/bugs/398682-1.html Normal file
View file

@ -0,0 +1,62 @@
<!DOCTYPE html>
<html>
<head>
<script>
function boom()
{
// Only this exact number of calls to bounce() triggers the bug,
// but changing the depth of the document changes the number of
// bounce() calls needed. For example, removing the 'p' tag
// makes it so one additional bounce() is needed.
for (var i = 0; i < 7; ++i)
bounce();
var tr = document.getElementById("tr");
tr.style.display = "none";
document.documentElement.offsetHeight;
bounce();
document.documentElement.offsetHeight;
tr.style.display = "";
document.documentElement.offsetHeight;
var td = document.getElementById("td");
td.style.display = "none";
document.documentElement.offsetHeight;
bounce();
document.documentElement.offsetHeight;
td.style.display = "";
}
function bounce()
{
var docElem = document.documentElement;
var docElemChildren = [];
while (docElem.firstChild) {
docElemChildren.push(docElem.firstChild);
docElem.removeChild(docElem.firstChild);
}
for (var i = 0; i < docElemChildren.length; ++i)
docElem.appendChild(docElemChildren[i]);
}
</script>
<style type="text/css">
#a { color: orange; }
#b { color: blue; }
</style>
</head>
<body onload="boom();">
<table border="10"><tr id="tr"><td id="td">
<p><span id="a">a</span><span id="b">b</span></p>
</td></tr></table>
</body>
</html>