summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/1670336.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/generic/crashtests/1670336.html33
1 files changed, 33 insertions, 0 deletions
diff --git a/layout/generic/crashtests/1670336.html b/layout/generic/crashtests/1670336.html
new file mode 100644
index 0000000000..34e5fa2d76
--- /dev/null
+++ b/layout/generic/crashtests/1670336.html
@@ -0,0 +1,33 @@
+<!DOCTYPE html>
+<style>
+.c1 {
+ column-span: all;
+ border-bottom-style: groove;
+ float: left;
+ border-width: 0em 0em 9em 1em;
+ box-decoration-break: clone;
+ height: 21vmin;
+}
+.c2 {
+ height: 74vmin;
+}
+:not(param) {
+ column-width: 1px;
+}
+</style>
+<script>
+function go() {
+ a.lastElementChild.appendChild(b)
+ window.requestIdleCallback(window.close)
+}
+function fuzz() {
+ var x = document.createElementNS("", "f")
+ x.prepend("1")
+ b.insertAdjacentHTML("afterEnd", x.outerHTML)
+}
+</script>
+<body onload=go()>
+<aside id="a">
+<data id="b" class="c1">U-.9zA</shadow>
+</aside>
+<details ontoggle="fuzz()" open="" class="c2">