gfx/tests/crashtests/385423-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

<html class="reftest-wait">
<head>
<script>
function boom()
{
  var div = document.getElementById("div")
  div.appendChild(document.createTextNode(String.fromCharCode(0x076F) + String.fromCharCode(13) + String.fromCharCode(0x076F)));
  
  document.documentElement.removeAttribute("class");
} 
</script>

</head>
<body onload="setTimeout(boom, 10);">
<div style="text-transform: lowercase" id="div">&#x76F;&#13;&#x76F;</div>
</body>
</html>