fune/testing/web-platform/tests/css/css-pseudo/get-computed-style-crash.html
Vladimir Levin cb96c339ac Bug 1895942 [wpt PR 46187] - VT: Fix UAF in tokenizer parsing, a=testonly
Automatic update from web-platform-tests
VT: Fix UAF in tokenizer parsing

R=khushalsagar@chromium.org

Bug: 339458177
Change-Id: I4c62ecc74402a0affc076eb205eeeb8c6687e709
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5528856
Reviewed-by: Khushal Sagar <khushalsagar@chromium.org>
Commit-Queue: Vladimir Levin <vmpstr@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1298703}

--

wpt-commits: 6c8e4996069f24be2a50f58feea57376d25b8773
wpt-pr: 46187
2024-05-21 09:46:28 +00:00

7 lines
143 B
HTML

<!doctype html>
<body>
<script>
const PA_SIZE = 10;
window.getComputedStyle(document.body,'\\q' + 'q'.repeat(PA_SIZE));
</script>
</body>