summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1402526.html
blob: 4d6077d9954b538b47bdf7fe485d25f24fd0dac9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
<script>
function jsfuzzer() {
  try { var var00007 = eventhandler5; } catch(e) { }
  try { var var00006 = var00007; } catch(e) { }
  try { htmlvar00007.addEventListener("DOMNodeInserted", var00006); } catch(e) { }
  try { document.execCommand("justifyFull", false); } catch(e) { }
}
function eventhandler5() {
  try { htmlvar00008.replaceWith("1"); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<dd id="htmlvar00007" contenteditable="true">
<shadow id="htmlvar00008">