diff options
Diffstat (limited to 'editor/libeditor/crashtests/1408170.html')
| -rw-r--r-- | editor/libeditor/crashtests/1408170.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/1408170.html b/editor/libeditor/crashtests/1408170.html new file mode 100644 index 0000000000..cc05a45e68 --- /dev/null +++ b/editor/libeditor/crashtests/1408170.html @@ -0,0 +1,20 @@ +<script> +function jsfuzzer() { + try { document.execCommand("insertUnorderedList", false); } catch(e) { } + try { document.execCommand("delete", false); } catch(e) { } +} +function eventhandler1() { + try { window.getSelection().collapse(htmlvar00001,1); } catch(e) { } +} +function eventhandler2() { + try { htmlvar00002.appendChild(htmlvar00001); } catch(e) { } +} +</script> +<body onload=jsfuzzer()> +<label id="htmlvar00002" contenteditable="true"> +<details ontoggle="eventhandler2()" open="true"> +</details> +</label> +<details ontoggle="eventhandler1()" open="true"> +<font id="htmlvar00001" dir="rtl"> +<summary> |