summaryrefslogtreecommitdiffstats
path: root/layout/svg/crashtests/1403656-2.html
blob: e4287e933f7479524e38043339720b7ded3ffc89 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
<!-- MUST BE QUIRKS MODE -->
<style>
span { top: 0%; }
</style>
<script>
function jsfuzzer() {
  try { text.setAttribute("font-size", "10px"); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
  <div style="overflow: scroll">
    <span></span>
  </div>
  <svg>
    <tref id="marker">
      <text id="text"/>
    </tref>
    <polyline marker-end="url(#marker)">
    </polyline>
  </svg>
</body>