diff options
Diffstat (limited to '')
-rw-r--r-- | testing/web-platform/tests/html/rendering/replaced-elements/attributes-for-embedded-content-and-images/input-image-content-crash.html | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/testing/web-platform/tests/html/rendering/replaced-elements/attributes-for-embedded-content-and-images/input-image-content-crash.html b/testing/web-platform/tests/html/rendering/replaced-elements/attributes-for-embedded-content-and-images/input-image-content-crash.html new file mode 100644 index 0000000000..84ef2ab153 --- /dev/null +++ b/testing/web-platform/tests/html/rendering/replaced-elements/attributes-for-embedded-content-and-images/input-image-content-crash.html @@ -0,0 +1,15 @@ +<!doctype html> +<title>Crash test: asynchronously applying image content to image input</title> +<link rel="author" href="mailto:yuzhehan@chromium.org" title="Yu Han"> +<link rel="help" href="https://crbug.com/1096002"> +<style> + .content { content: url(data:text/plain,aaa); } +</style> +<input id="input" type="image" class=content> +<script> + onload = ()=> { + document.body.offsetTop; + input.setAttribute('class', ''); + document.body.offsetTop; + } +</script> |