mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-17 23:35:34 +00:00
c107f54aac
Summary: In this case the radiobox is in a SVG <use> subtree. Reviewers: smaug Bug #: 1409183 Differential Revision: https://phabricator.services.mozilla.com/D741 MozReview-Commit-ID: Abkg7ahST5t
16 lines
390 B
HTML
16 lines
390 B
HTML
<script>
|
|
function jsfuzzer() {
|
|
try { htmlvar00043.defaultChecked = true; } catch(e) { }
|
|
try { svgvar00002.appendChild(htmlvar00040); } catch(e) { }
|
|
}
|
|
</script>
|
|
<body onload=jsfuzzer()>
|
|
<table>
|
|
<svg id="svgvar00001">
|
|
<title id="svgvar00002">Title</title>
|
|
</table>
|
|
<svg>
|
|
<use xlink:href="#svgvar00001"><body xmlns="">
|
|
<label id="htmlvar00040">
|
|
<input id="htmlvar00043" name="x" type="radio">
|