diff options
Diffstat (limited to '')
| -rw-r--r-- | dom/svg/crashtests/1035248-1.svg | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/dom/svg/crashtests/1035248-1.svg b/dom/svg/crashtests/1035248-1.svg new file mode 100644 index 0000000000..125f83ba49 --- /dev/null +++ b/dom/svg/crashtests/1035248-1.svg @@ -0,0 +1,18 @@ +<svg xmlns="http://www.w3.org/2000/svg"> +<script> + +function boom() +{ + var outer = document.createElementNS("http://www.w3.org/1999/xhtml", "div"); + var inner = document.createElementNS("http://www.w3.org/1999/xhtml", "div"); + inner.setAttributeNS(null, "style", "display: table-row-group;"); + outer.appendChild(inner); + + document.removeChild(document.documentElement); + document.appendChild(outer); +} + +window.addEventListener("load", boom, false); + +</script> +</svg> |