summaryrefslogtreecommitdiffstats
path: root/layout/style/crashtests/1507674.html
diff options
context:
space:
mode:
Diffstat (limited to 'layout/style/crashtests/1507674.html')
-rw-r--r--layout/style/crashtests/1507674.html16
1 files changed, 16 insertions, 0 deletions
diff --git a/layout/style/crashtests/1507674.html b/layout/style/crashtests/1507674.html
new file mode 100644
index 0000000000..be247b781c
--- /dev/null
+++ b/layout/style/crashtests/1507674.html
@@ -0,0 +1,16 @@
+<style>
+menuitem { -webkit-filter: url(#a) }
+</style>
+<menuitem>A
+</menu>
+<svg id="b" style="-webkit-text-stroke-width: 1px;">
+<text id="a">
+<menu style="background-image: url();">
+<menuitem id="c">
+<script>
+c.offsetTop;
+a.setAttribute("exponent", "1");
+c.offsetTop;
+b.setAttribute("text-decoration", "line-through");
+c.offsetTop;
+</script>