diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
| commit | 2aa4a82499d4becd2284cdb482213d541b8804dd (patch) | |
| tree | b80bf8bf13c3766139fbacc530efd0dd9d54394c /editor/libeditor/crashtests/1415231.html | |
| parent | Initial commit. (diff) | |
| download | firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.tar.xz firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.zip | |
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'editor/libeditor/crashtests/1415231.html')
| -rw-r--r-- | editor/libeditor/crashtests/1415231.html | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/1415231.html b/editor/libeditor/crashtests/1415231.html new file mode 100644 index 0000000000..4878d7b7cc --- /dev/null +++ b/editor/libeditor/crashtests/1415231.html @@ -0,0 +1,17 @@ +<script> +function jsfuzzer() { + var var00043 = window.getSelection(); + htmlvar00018.addEventListener("DOMNodeRemoved", eh1); + var00043.setPosition(htmlvar00016); + document.execCommand("insertText", false, "1"); +} +function eh1() { + document.execCommand("insertHorizontalRule", false); + document.execCommand("justifyCenter", false); +} +</script> +<body onload=jsfuzzer()> +<li contenteditable="true"> +<shadow id="htmlvar00016"> +<ins id="htmlvar00018"> +<option> |