summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 01:47:29 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 01:47:29 +0000
commit0ebf5bdf043a27fd3dfb7f92e0cb63d88954c44d (patch)
treea31f07c9bcca9d56ce61e9a1ffd30ef350d513aa /testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html
parentInitial commit. (diff)
downloadfirefox-esr-0ebf5bdf043a27fd3dfb7f92e0cb63d88954c44d.tar.xz
firefox-esr-0ebf5bdf043a27fd3dfb7f92e0cb63d88954c44d.zip
Adding upstream version 115.8.0esr.upstream/115.8.0esr
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html')
-rw-r--r--testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html30
1 files changed, 30 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html b/testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html
new file mode 100644
index 0000000000..43782c6a01
--- /dev/null
+++ b/testing/web-platform/tests/css/css-inline/too-big-line-height-crash.html
@@ -0,0 +1,30 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="utf-8">
+<style>
+FORM {
+ line-height: 404875491%;
+}
+
+* {
+ position: fixed;
+ block-size: 2984941683%;
+}
+</style>
+<script>
+addEventListener("DOMContentLoaded", () => {
+ getSelection().collapse(
+ document.body.lastChild,
+ document.body.lastChild.length
+ );
+}, {once: true});
+</script>
+</head>
+<form contenteditable>
+ <li style="marker-mid: url(a.svg) !important;
+ will-change: contents;
+ writing-mode: vertical-lr !important;
+ shape-outside: none"></li>
+</form>
+</body></html>