summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/1405896.html
blob: 0d3b6ddb24cacafe1389a8370f189956d348b2a7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
<!-- a -->
<style>
* {
  height: 0vmin;
  display: grid
}
.class1 {
  columns: 0px;
  page-break-before: always;
  grid-row-start: last
}
</style>
<script>
function jsfuzzer() {
  try { htmlvar00045.replaceChild(htmlvar00013,htmlvar00045.childNodes[6]); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<details id="htmlvar00013" class="class1"></details>
<details class="class1" open="">
<form>
<h6 id="htmlvar00045">
>
<link>
<content>
<embed>
>
#
K
</content>
<!-- a -->