diff options
Diffstat (limited to '')
| -rw-r--r-- | layout/mathml/crashtests/348709-1.xhtml | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/layout/mathml/crashtests/348709-1.xhtml b/layout/mathml/crashtests/348709-1.xhtml new file mode 100644 index 0000000000..907ede6abb --- /dev/null +++ b/layout/mathml/crashtests/348709-1.xhtml @@ -0,0 +1,20 @@ +<html xmlns="http://www.w3.org/1999/xhtml"> +<head> + +<script> +function foo() +{ + document.getElementById("mtr").appendChild(document.createTextNode("a")); +} +</script> +</head> + +<body onload="foo()"> + +<div><math xmlns="http://www.w3.org/1998/Math/MathML" display="block"> +<mrow>
<mfenced open="[" close="]">
<mtable>
<mtr id="mtr">
<mtd><mi>x</mi></mtd>
<mtd><mi>y</mi></mtd>
</mtr>
</mtable>
</mfenced>
</mrow> +</math></div> + +</body> + +</html>
\ No newline at end of file |