summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1134545.html
diff options
context:
space:
mode:
Diffstat (limited to 'editor/libeditor/crashtests/1134545.html')
-rw-r--r--editor/libeditor/crashtests/1134545.html22
1 files changed, 22 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/1134545.html b/editor/libeditor/crashtests/1134545.html
new file mode 100644
index 0000000000..4e871804ff
--- /dev/null
+++ b/editor/libeditor/crashtests/1134545.html
@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<!-- saved from url=(0065)https://bug1134545.bugzilla.mozilla.org/attachment.cgi?id=8566418 -->
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
+<script>
+
+function boom()
+{
+ textNode = document.createTextNode(" ");
+ x.appendChild(textNode);
+ x.setAttribute('contenteditable', "true");
+ textNode.remove();
+ window.getSelection().selectAllChildren(textNode);
+ document.execCommand("increasefontsize", false, null);
+}
+
+</script>
+</head>
+<body onload="boom();">
+<div id="x" contenteditable="true"></div>
+
+
+</body></html> \ No newline at end of file