blob: c5c60bc6cf12b0fe1fb3dd3c2187c3a571bd8106 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
<style>
* { position: absolute; }
</style>
<script>
function jsfuzzer() {
del1.addEventListener("DOMSubtreeModified", () => {
document.execCommand("italic", false);
document.execCommand("selectAll", false);
});
a1.replaceChild(iframe1, a1.childNodes[0]);
}
</script>
<body onload=jsfuzzer()>
<a contenteditable="" id="a1">
<del id="del1">
<iframe id="iframe1">
|
