summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1623913.html
blob: 291bd65197c5c07747adc65adbea2967653c1bad (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
<html>
<head>
    <script>
      async function start () {
        const element_0 = document.createElementNS('', 's')
        const svg = document.getElementById('id_8')
        const math = document.getElementById('id_20')
        const selection = window.getSelection()
        const range = new Range()
        range.setStartAfter(math)
        range.insertNode(svg)
        range.selectNodeContents(element_0)
        document.documentElement.contentEditable = true
        range.setStart(svg, (2760506212 % svg.childNodes))
        selection.addRange(range)
        document.execCommand('insertOrderedList', false, null)
        document.execCommand('insertParagraph', false, null)
      }

      document.addEventListener('DOMContentLoaded', start)
    </script>
</head>
<body>
<svg id='id_8'>
    <metadata xml:space='preserve'>
</svg>
<math id='id_20'>
</math>
</body>
</html>