summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1666556.html
blob: 8c8c18574ad5e5f9343b2eaec303808af8dec7aa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
<script>
function onError() {
  document.querySelector("details").appendChild(
    document.querySelector("p")
  );
  document.execCommand("indent");
}

function onLoadOfStyle() {
  document.execCommand("delete");
  document.querySelector("details").contentEditable = "true";
  // For emulating the traditional behavior, collapse Selection to end of the
  // text node at end of the <style> (end of the text node after the comment
  // node).
  const style = document.querySelector("style");
  getSelection().collapse(style.lastChild, style.lastChild.length);
  document.querySelector("input").select();
}
</script>
<video focus="false">
<source onerror="onError()">
</video>
<details open>
<p>
<input contenteditable="false">
<style onload="onLoadOfStyle()">
<!-- x -->
</style></p></details></body>