summaryrefslogtreecommitdiffstats
path: root/gfx/tests/crashtests/675550-1.html
diff options
context:
space:
mode:
Diffstat (limited to 'gfx/tests/crashtests/675550-1.html')
-rw-r--r--gfx/tests/crashtests/675550-1.html24
1 files changed, 24 insertions, 0 deletions
diff --git a/gfx/tests/crashtests/675550-1.html b/gfx/tests/crashtests/675550-1.html
new file mode 100644
index 0000000000..d6c25b59e0
--- /dev/null
+++ b/gfx/tests/crashtests/675550-1.html
@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+<html>
+<head>
+<style>
+
+.justify {
+ width: 400px;
+ text-align: justify;
+ background: lightgreen;
+}
+
+.force {
+ width: 400px;
+ display: inline-block;
+ height: 3px;
+ background: yellow;
+}
+
+</style>
+</head>
+<body onload="document.getElementById('s').textContent='\u202E\0 \u1DCEz'; /* cannot express \0 in html markup using amp escape */">
+<div class="justify"><span class="force"></span><span id="s"></span><span class="force"></span></div>
+</body>
+</html>