diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
| commit | 2aa4a82499d4becd2284cdb482213d541b8804dd (patch) | |
| tree | b80bf8bf13c3766139fbacc530efd0dd9d54394c /layout/generic/crashtests/1633828.html | |
| parent | Initial commit. (diff) | |
| download | firefox-upstream.tar.xz firefox-upstream.zip | |
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
| -rw-r--r-- | layout/generic/crashtests/1633828.html | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/layout/generic/crashtests/1633828.html b/layout/generic/crashtests/1633828.html new file mode 100644 index 0000000000..f0db68e853 --- /dev/null +++ b/layout/generic/crashtests/1633828.html @@ -0,0 +1,36 @@ +<script> +var limit = 0 +function go() { + part1() + part1() + window.find("foo",true,true,true,true,false) +} +function part2() { + if(++limit > 2) { return; } + g.appendChild(a) + d.insertAdjacentText("afterEnd", "foo") + f.addEventListener("DOMAttrModified", () => { + window.getSelection().deleteFromDocument() + b.select() + }) +} +function part1() { + var x = window.getSelection() + g.appendChild(c) + g.addEventListener("DOMSubtreeModified", part2) + c.border = "1" + document.createElement("rp").prepend(x.focusNode) + window.find("foo") + a.value = "" + x.collapseToEnd() +} +</script> +<body onload=go()> +<button id="a"></button> +<li> +<textarea id="b"></textarea> +</li> +<image id="c"></image> +<br id="d"> +<font id="f"> +<font id="g"> |