summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/322678.html
blob: dffa35d0066f91c4812333934de212d62e413cec (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
<!-- Quirks mode on purpose -->
<html>
  <head>
    <title>Testcase bug 322678 - Crash [@ nsIFrame::GetParent] with evil testcase position:relative/absolute/display:table-column, etc</title>
    <script>
    function run(){
      document.body.offsetHeight;
      document.getElementById('one').removeAttribute('style');
      document.body.offsetHeight;
      document.getElementById('two').removeAttribute('style');
      document.body.offsetHeight;
    }
    </script>
  </head>
  <body onload="run();">
    <span>
      <div style="position: relative;">
        <span style="position: absolute;"></span>
      </div>

      <span id="one" style="display: table-column;">
        <span id="two" style="display: block; position: relative;">
        </span>
      </span><u style="display: table-cell;">  </u>
    </span>
  </body>
</html>