diff options
Diffstat (limited to 'testing/web-platform/tests/css/css-lists/crashtests')
5 files changed, 111 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-lists/crashtests/chrome-bug-1377573.html b/testing/web-platform/tests/css/css-lists/crashtests/chrome-bug-1377573.html new file mode 100644 index 0000000000..3419a23ee4 --- /dev/null +++ b/testing/web-platform/tests/css/css-lists/crashtests/chrome-bug-1377573.html @@ -0,0 +1,12 @@ +<!DOCTYPE html> +<title>Chrome crash with nested ::after::marker with failing list-style-image</title> +<link rel="help" href="https://crbug.com/1377573"> +<style> + :is(body, html)::after { + display: list-item; + content: " "; + } + :root { list-style-image:url('.'); } +</style> +<body> + diff --git a/testing/web-platform/tests/css/css-lists/crashtests/chrome-counter-in-multicol-details-crash.html b/testing/web-platform/tests/css/css-lists/crashtests/chrome-counter-in-multicol-details-crash.html new file mode 100644 index 0000000000..d992f0a1d9 --- /dev/null +++ b/testing/web-platform/tests/css/css-lists/crashtests/chrome-counter-in-multicol-details-crash.html @@ -0,0 +1,16 @@ +<!doctype html> +<title>Crash removing element before counter inside multicol details element</title> +<link rel="help" href="https://crbug.com/1310295"> +<style> + #counter { counter-reset:counter; } + #counter::after { content: counter(foo); } +</style> +<details style="columns:2;" open> + <span></span> + <div id="removeme"></div> + <span id="counter"></span> +</details> +<script> + document.body.offsetTop; + removeme.parentNode.removeChild(removeme); +</script> diff --git a/testing/web-platform/tests/css/css-lists/crashtests/chrome-legacy-propagation-crash.html b/testing/web-platform/tests/css/css-lists/crashtests/chrome-legacy-propagation-crash.html new file mode 100644 index 0000000000..8ec14ce090 --- /dev/null +++ b/testing/web-platform/tests/css/css-lists/crashtests/chrome-legacy-propagation-crash.html @@ -0,0 +1,18 @@ +<!doctype html> +<title>HTML root list-item crash during direction-propagation from body</title> +<link rel="help" href="https://crbug.com/1294531"> +<style> + html { + display: list-item; + direction: rtl; + } + body { + direction: ltr; + } + div { + display:table-column-group; + column-count: 1; + } +</style> +<p>Pass if no crash.</p> +<div></div> diff --git a/testing/web-platform/tests/css/css-lists/crashtests/chrome-legacy-propagation-remove-body-crash.html b/testing/web-platform/tests/css/css-lists/crashtests/chrome-legacy-propagation-remove-body-crash.html new file mode 100644 index 0000000000..94b57285e1 --- /dev/null +++ b/testing/web-platform/tests/css/css-lists/crashtests/chrome-legacy-propagation-remove-body-crash.html @@ -0,0 +1,21 @@ +<!doctype html> +<title>BODY list-item crash inserting extra BODY</title> +<link rel="help" href="https://crbug.com/1298917"> +<style> + body { + display: list-item; + } + div { + /* Multicol and table display to trigger legacy layout */ + display: table-row-group; + column-count: 1; + } +</style> +<body> + <p>Pass if no crash.</p> + <div></div> +</body> +<script> + document.documentElement.offsetTop; + document.documentElement.insertBefore(document.createElement("body"), document.body); +</script> diff --git a/testing/web-platform/tests/css/css-lists/crashtests/firefox-bug-1715631.html b/testing/web-platform/tests/css/css-lists/crashtests/firefox-bug-1715631.html new file mode 100644 index 0000000000..d7dedd929e --- /dev/null +++ b/testing/web-platform/tests/css/css-lists/crashtests/firefox-bug-1715631.html @@ -0,0 +1,44 @@ +<!DOCTYPE html> +<html> +<head> + <link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1715631"> + <style> + * { + font-size: smaller; + padding-top: 187645318.1652209ch; + shape-outside: border-box polygon(evenodd, 1% 65395.491970784125pt); + list-style-position: inside + } + + UL { + float: left; + } + + LI { + margin-right: 574978474vmin; + padding: 4241930411% 790762950% 2269921908.8844213ch; + line-height: 4017103816.5532737; + } + </style> + <script> + document.addEventListener("DOMContentLoaded", () => { + const ul_0 = document.createElement("ul") + const ul_1 = document.createElement("ul") + const li_0 = document.createElement("li") + const li_1 = document.createElement("li") + const form_0 = document.createElement("form") + const big_0 = document.createElement("big") + const var_0 = document.createElement("var") + form_0.appendChild(ul_1) + var_0.innerText = "â…9ó ’¾\r&f酀𑞚ﷺ0ó ©žÌŸð›Ÿ’ó Žƒð…Ûš-â€Œó Ÿœ]Û°4áðŸ ó ™¸Ùªð©‘ó œê9\bVó ³¥X>>=ó ¾µ9ð¡½¥ó ™´ê›¡Ù ó ›™â€Ž\n\r\0Ùªæ“꣦҄â¡ó ¯ð›¬³Yó €§ã¨¢/*ó «—*Ⱥ\r\nð¯™ð›™”𠰖🉌\0&=゙𯶫᩿ð£‚á岇ëŸç—€g2*Ù á¿3L𖨡j㼚𯄲" + var_0.setAttribute("lang", "ko") + big_0.appendChild(var_0) + li_1.appendChild(form_0) + li_1.appendChild(big_0) + ul_0.appendChild(li_0) + ul_0.appendChild(li_1) + document.documentElement.appendChild(ul_0) + }) + </script> +</head> +</html> |