summaryrefslogtreecommitdiffstats
path: root/layout/style/crashtests/1409931.html
diff options
context:
space:
mode:
Diffstat (limited to 'layout/style/crashtests/1409931.html')
-rw-r--r--layout/style/crashtests/1409931.html14
1 files changed, 14 insertions, 0 deletions
diff --git a/layout/style/crashtests/1409931.html b/layout/style/crashtests/1409931.html
new file mode 100644
index 0000000000..00a8272f94
--- /dev/null
+++ b/layout/style/crashtests/1409931.html
@@ -0,0 +1,14 @@
+<!doctype html>
+<map id="htmlvar00005">
+<area></area>
+<input
+ id="htmlvar00019"
+ type="image"
+ usemap="#htmlvar00005"
+ src="data:image/gif;base64,R0lGODlhIAAgAPIBAGbMzP///wAAADOZZpn/zAAAAAAAAAAAACH5BAAAAAAALAAAAAAgACAAAAOLGLrc/k7ISau9S5DNu/8fICgaYJ5oqqbDGJRrLAMtScw468J5Xr+3nm8XFM5+PGMMWYwxcMyZ40iULQaDhSzqDGBNisGyuhUDrmNb72pWcaXhtpsM/27pVi8UX96rcQpDf3V+QD12d4NKK2+Lc4qOKI2RJ5OUNHyXSDRYnZ6foKAuLxelphMQqaoPCQA7">
+<script>
+onload = () => {
+ document.body.offsetTop;
+ document.querySelector('area').style.color = "red";
+}
+</script>