summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1415231.html
blob: 4878d7b7cc5e142945f59b5b2e891b7cbd020537 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<script>
function jsfuzzer() {
  var var00043 = window.getSelection();
  htmlvar00018.addEventListener("DOMNodeRemoved", eh1);
  var00043.setPosition(htmlvar00016);
  document.execCommand("insertText", false, "1");
}
function eh1() {
  document.execCommand("insertHorizontalRule", false);
  document.execCommand("justifyCenter", false);
}
</script>
<body onload=jsfuzzer()>
<li contenteditable="true">
<shadow id="htmlvar00016">
<ins id="htmlvar00018">
<option>