summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1388075.html
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 14:29:10 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 14:29:10 +0000
commit2aa4a82499d4becd2284cdb482213d541b8804dd (patch)
treeb80bf8bf13c3766139fbacc530efd0dd9d54394c /editor/libeditor/crashtests/1388075.html
parentInitial commit. (diff)
downloadfirefox-2aa4a82499d4becd2284cdb482213d541b8804dd.tar.xz
firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.zip
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'editor/libeditor/crashtests/1388075.html')
-rw-r--r--editor/libeditor/crashtests/1388075.html23
1 files changed, 23 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/1388075.html b/editor/libeditor/crashtests/1388075.html
new file mode 100644
index 0000000000..057c97c4b3
--- /dev/null
+++ b/editor/libeditor/crashtests/1388075.html
@@ -0,0 +1,23 @@
+<html>
+ <head>
+ <script>
+ try { o1 = document.createElement('style'); } catch(e) { }
+ try { o2 = document.createElement('output') } catch(e) { }
+ try { o3 = document.createElement('input') } catch(e) { }
+ try { o4 = document.createElement('script'); } catch(e) { }
+ try { o5 = o2.cloneNode(false); } catch(e) { }
+ try { document.documentElement.appendChild(o1) } catch(e) { }
+ try { o1.outerHTML = '<a contenteditable=\'true\'>'; } catch(e) { }
+ try { document.documentElement.appendChild(o3) } catch(e) { }
+ try { o7 = document.createTextNode(' '); } catch(e) { }
+ try { o4.appendChild(o7) } catch(e) { }
+ try { document.documentElement.appendChild(o4) } catch(e) { }
+ try { o6 = window.getSelection() } catch(e) { }
+ try { o3.select() } catch(e) { }
+ try { document.replaceChild(document.documentElement, document.documentElement); } catch(e) { }
+ try { o6.setBaseAndExtent(o7, 0, o5, 0) } catch(e) { }
+ try { document.designMode = 'on'; } catch(e) { }
+ try { document.execCommand('insertimage', false, 'http://localhost/') } catch(e) { }
+ </script>
+ </head>
+</html>