summaryrefslogtreecommitdiffstats
path: root/dom/xslt/crashtests/1336832.html
diff options
context:
space:
mode:
Diffstat (limited to 'dom/xslt/crashtests/1336832.html')
-rw-r--r--dom/xslt/crashtests/1336832.html28
1 files changed, 28 insertions, 0 deletions
diff --git a/dom/xslt/crashtests/1336832.html b/dom/xslt/crashtests/1336832.html
new file mode 100644
index 0000000000..0fb9033d1a
--- /dev/null
+++ b/dom/xslt/crashtests/1336832.html
@@ -0,0 +1,28 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="UTF-8">
+<script id=o_xml type="text/plain"><?xml version="1.0" encoding="UTF-8"?>
+<tag_name/>
+</script>
+<script id=o_xslt type="text/plain"><?xml version="1.0" encoding="UTF-8"?>
+<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" version="1.0">
+ <xsl:variable name="var_1">
+ <xsl:for-each select="/">
+ <xsl:value-of select="count()"/>
+ </xsl:for-each>
+ </xsl:variable>
+ <xsl:template match="/">
+ <xsl:value-of select="//*[1 = $var_1]"/>
+ </xsl:template>
+</xsl:stylesheet>
+</script>
+<script>
+window.onload = function(){
+ let doc = new DOMParser(), proc = new XSLTProcessor();
+ proc.importStylesheet(doc.parseFromString(document.getElementById('o_xslt').textContent, "text/xml"));
+ proc.transformToDocument(doc.parseFromString(document.getElementById('o_xml').textContent, "text/xml"));
+};
+</script>
+</head>
+</html>