[tbb-bugs] #15794 [Tor Browser]: crash on some SVG pages when svg.in-content.enabled=false

[Tor Bug Tracker & Wiki]

#15794: crash on some SVG pages when svg.in-content.enabled=false
-------------------------+--------------------------
 Reporter:  mcs          |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  major        |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 Kathy and I found a web page that consistently causes a NULL pointer
 dereference during page load in TB 4.5 when svg.in-content.enabled is set
 to false (e.g., when the security slider is set to the highest position).

 We are working on a fix; the problem is related to the fact that elements
 with the SVG XML namespace are created as regular XML elements when svg
 .in-content.enabled=false.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15794>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online