summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/1406562.html
blob: f5c97b0a16dadec1f35644bc88e659c1192263b4 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<style>
.class5 { columns: 0px; }
li::first-letter { color: red; }
.class5 { list-style-position: inside; }
</style>
<script>
function jsfuzzer() {
  htmlvar00001.appendChild(htmlvar00027);
}
</script>
<body onload=jsfuzzer()>
<a id="htmlvar00001">
<ul class="class5">
<li>`</li>
<li id="htmlvar00027">