diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-19 01:47:29 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-19 01:47:29 +0000 |
| commit | 0ebf5bdf043a27fd3dfb7f92e0cb63d88954c44d (patch) | |
| tree | a31f07c9bcca9d56ce61e9a1ffd30ef350d513aa /layout/generic/crashtests/507566.html | |
| parent | Initial commit. (diff) | |
| download | firefox-esr-0ebf5bdf043a27fd3dfb7f92e0cb63d88954c44d.tar.xz firefox-esr-0ebf5bdf043a27fd3dfb7f92e0cb63d88954c44d.zip | |
Adding upstream version 115.8.0esr.upstream/115.8.0esr
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'layout/generic/crashtests/507566.html')
| -rw-r--r-- | layout/generic/crashtests/507566.html | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/layout/generic/crashtests/507566.html b/layout/generic/crashtests/507566.html new file mode 100644 index 0000000000..1fbdba5c8b --- /dev/null +++ b/layout/generic/crashtests/507566.html @@ -0,0 +1,33 @@ +<!DOCTYPE HTML> +<html> +<head> +<script type="text/javascript"> + +var count = 0; + +function boom() +{ + var r = document.body; while(r.firstChild) { r.removeChild(r.firstChild); } + + document.body = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); + var div = document.createElementNS("http://www.w3.org/1999/xhtml", "div"); + var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span"); + span.setAttributeNS(null, "contenteditable", "true"); + document.documentElement.appendChild(span); + (document.body || document.documentElement).appendChild(div); + var text = document.createTextNode("\u200F\uE8D4"); + document.body.appendChild(text); + document.documentElement.appendChild(document.body); + document.documentElement.offsetHeight; + text.data += "\uF0C5"; + document.execCommand("selectAll", false, null); + + if (++count < 20) + setTimeout(boom, 0); +} + +</script> +</head> + +<body onload="boom();"></body> +</html> |