diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
commit | 2aa4a82499d4becd2284cdb482213d541b8804dd (patch) | |
tree | b80bf8bf13c3766139fbacc530efd0dd9d54394c /layout/generic/crashtests/507566.html | |
parent | Initial commit. (diff) | |
download | firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.tar.xz firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.zip |
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | layout/generic/crashtests/507566.html | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/layout/generic/crashtests/507566.html b/layout/generic/crashtests/507566.html new file mode 100644 index 0000000000..1fbdba5c8b --- /dev/null +++ b/layout/generic/crashtests/507566.html @@ -0,0 +1,33 @@ +<!DOCTYPE HTML> +<html> +<head> +<script type="text/javascript"> + +var count = 0; + +function boom() +{ + var r = document.body; while(r.firstChild) { r.removeChild(r.firstChild); } + + document.body = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); + var div = document.createElementNS("http://www.w3.org/1999/xhtml", "div"); + var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span"); + span.setAttributeNS(null, "contenteditable", "true"); + document.documentElement.appendChild(span); + (document.body || document.documentElement).appendChild(div); + var text = document.createTextNode("\u200F\uE8D4"); + document.body.appendChild(text); + document.documentElement.appendChild(document.body); + document.documentElement.offsetHeight; + text.data += "\uF0C5"; + document.execCommand("selectAll", false, null); + + if (++count < 20) + setTimeout(boom, 0); +} + +</script> +</head> + +<body onload="boom();"></body> +</html> |