From fbaf0bb26397aa498eb9156f06d5a6fe34dd7dd8 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Fri, 19 Apr 2024 03:14:29 +0200
Subject: Merging upstream version 125.0.1.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 .../chrome-first-letter-container-query-crash.html | 27 ++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 testing/web-platform/tests/css/css-pseudo/chrome-first-letter-container-query-crash.html

(limited to 'testing/web-platform/tests/css/css-pseudo/chrome-first-letter-container-query-crash.html')
diff --git a/testing/web-platform/tests/css/css-pseudo/chrome-first-letter-container-query-crash.html b/testing/web-platform/tests/css/css-pseudo/chrome-first-letter-container-query-crash.html
new file mode 100644
index 0000000000..6647e38731
--- /dev/null
+++ b/testing/web-platform/tests/css/css-pseudo/chrome-first-letter-container-query-crash.html
@@ -0,0 +1,27 @@
+<!DOCTYPE html>
+<head>
+  <title>Chrome crash issue 41492455</title>
+  <link rel="help" href="https://issues.chromium.org/issues/41492455">
+</head>
+<span id="sp"></span>
+<style>
+  head, html, body, span { display: inline-block; }
+  html::first-letter, span::first-letter {
+    color: pink;
+  }
+  span {
+    container-type: inline-size;
+    float: right;
+  }
+  body {
+    writing-mode: vertical-rl;
+  }
+</style>
+<script>
+  document.body.offsetHeight;
+  document.documentElement.style.display = "block";
+  document.head.style.display = "none";
+  document.body.style.display = "block";
+  sp.style.display = "inline";
+  document.body.offsetHeight;
+</script>
-- 
cgit v1.2.3

