summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/1516289.html
blob: f6d42552131e63c7848d10a9d01d096d9e56c12e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
<script>
function eh1() {
  a.remove()
  window.event.composedPath()
}
function eh2() {
  b.addEventListener("DOMNodeInserted", eh1)
  c.insertAdjacentElement("afterBegin", document.createElement("s"))
}
</script>
<image srcset="A" onerror="eh2()"></image>
<marquee id="a">
<time id="b">
<dialog id="c">AA</dialog>