summaryrefslogtreecommitdiffstats
path: root/layout/tables/crashtests/317876.html
diff options
context:
space:
mode:
Diffstat (limited to 'layout/tables/crashtests/317876.html')
-rw-r--r--layout/tables/crashtests/317876.html16
1 files changed, 16 insertions, 0 deletions
diff --git a/layout/tables/crashtests/317876.html b/layout/tables/crashtests/317876.html
new file mode 100644
index 0000000000..6c4ae98905
--- /dev/null
+++ b/layout/tables/crashtests/317876.html
@@ -0,0 +1,16 @@
+<HTML>
+<HEAD>
+<title>Testcase bug 317876 - Crash with evil testcase on hovering after reload with display:table-row, display:inherit</title>
+</HEAD>
+<BODY>
+<div onmouseover="this.removeAttribute('style')" style="width: 20px; height: 30px;">
+ <div style="display: table-row;">
+ <span style="display: table-row;">
+ </span>
+ <span style="display: inherit;">
+ Hovering over this should not crash Mozilla
+ </span>
+ </div>
+</div>
+</BODY>
+</HTML>