summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1648564.html
blob: 610cd546632c62f5c136135390cb241f008e5035 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<script>
  window.addEventListener('load', () => {
    const map = document.getElementById('id_2')
    const anchor = document.getElementById('id_9')
    map.replaceChild(anchor, map.childNodes[(2828994049 % map.childNodes.length)])
    anchor.innerHTML = '<o>'
    const selection = self.getSelection()
    selection.setBaseAndExtent(document, (2019424593 % document.childNodes.length), document.documentElement, (3503355750 % document.documentElement.childNodes.length))
    document.designMode = 'on'
    document.execCommand('forwardDelete', false, null)
    document.execCommand('forwardDelete', false, null)
})
</script>
<sub contenteditable='true'>
<map id='id_2'>
<address></address>
<a id='id_9'>
</a>
<!-- COMMENT -->