summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1666556.html
blob: 121a598ad9c7f2dcee4793c4cc1ae078fe341a9a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<script>
function func_a() {
  a.appendChild(b)
  document.execCommand("indent", false)
}
function func_b() {
  document.execCommand("delete", false)
  a.contentEditable = "true"
  c.select()
}
</script>
<video focus="false">
<source onerror="func_a()">
</video>
<details id="a" open="tru">
<p id="b">
<input id="c" contenteditable="pla">
<style onload="func_b()">
<!-- x -->