summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/shadow-dom/slot-dir-attach-child-crash.html
diff options
context:
space:
mode:
Diffstat (limited to 'testing/web-platform/tests/shadow-dom/slot-dir-attach-child-crash.html')
-rw-r--r--testing/web-platform/tests/shadow-dom/slot-dir-attach-child-crash.html18
1 files changed, 18 insertions, 0 deletions
diff --git a/testing/web-platform/tests/shadow-dom/slot-dir-attach-child-crash.html b/testing/web-platform/tests/shadow-dom/slot-dir-attach-child-crash.html
new file mode 100644
index 0000000000..3da70e3e14
--- /dev/null
+++ b/testing/web-platform/tests/shadow-dom/slot-dir-attach-child-crash.html
@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<link rel=author href="mailto:myid.shin@igalia.com">
+<link rel=help href="https://bugs.chromium.org/p/chromium/issues/detail?id=1309343">
+
+<datalist id="move">
+ <option dir="rtl">
+ <select id="select"></select>
+ </option>
+</datalist>
+<svg>
+ <tspan id="tspan1"/><use xlink:href="#tspan1"/>
+</svg>
+<script>
+ onload = () => {
+ document.getElementById("select").appendChild(document.createElement("ol"));
+ document.getElementById("tspan1").appendChild(move);
+ }
+</script>