mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-07-05 08:31:51 +00:00
4e0edd42b9
Instead of allowing arbitrarily large values (which could eventually overflow an i32), let's just cap them at the same limit as Firefox does. Found by Domato.
9 lines
233 B
HTML
9 lines
233 B
HTML
<img height="2147483647">
|
|
<script src="../include.js"></script>
|
|
<script>
|
|
test(() => {
|
|
let img = document.querySelector("img");
|
|
println("Image height: " + img.offsetHeight);
|
|
img.remove();
|
|
});
|
|
</script>
|