diff options
Diffstat (limited to '')
| -rw-r--r-- | layout/generic/crashtests/1670336.html | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/layout/generic/crashtests/1670336.html b/layout/generic/crashtests/1670336.html new file mode 100644 index 0000000000..34e5fa2d76 --- /dev/null +++ b/layout/generic/crashtests/1670336.html @@ -0,0 +1,33 @@ +<!DOCTYPE html> +<style> +.c1 { + column-span: all; + border-bottom-style: groove; + float: left; + border-width: 0em 0em 9em 1em; + box-decoration-break: clone; + height: 21vmin; +} +.c2 { + height: 74vmin; +} +:not(param) { + column-width: 1px; +} +</style> +<script> +function go() { + a.lastElementChild.appendChild(b) + window.requestIdleCallback(window.close) +} +function fuzz() { + var x = document.createElementNS("", "f") + x.prepend("1") + b.insertAdjacentHTML("afterEnd", x.outerHTML) +} +</script> +<body onload=go()> +<aside id="a"> +<data id="b" class="c1">U-.9zA</shadow> +</aside> +<details ontoggle="fuzz()" open="" class="c2"> |