summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/771749.html
blob: 9237364f2d2edd6a5a040dea9df53e55a2b32ad7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  var root = document.documentElement;
  root.contentEditable = "true";
  document.removeChild(root);
  document.appendChild(root);
  document.execCommand("insertunorderedlist", false, null);
  document.execCommand("inserthtml", false, "<span></span>");
  document.execCommand("outdent", false, null);
}

</script>
</head>

<body onload="boom();"></body>
</html>