summaryrefslogtreecommitdiffstats
path: root/layout/forms/crashtests/538062-1.xhtml
blob: 431f7ab8478eec0aa3df5d02c134510e027510aa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript">
<![CDATA[

function boom()
{
  var option = document.getElementsByTagName("option")[0];
  var b = option.firstChild;
  option.appendChild(document.createTextNode("\u064A"));
  document.documentElement.offsetHeight;
  option.removeChild(b);
}

]]>
</script>
</head>

<body onload="boom();"><select><option>B </option></select></body>
</html>