summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/963878.html
blob: 6349b8b585190058c1a5f58a13411c4379d253e5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<script>

function repeatManyTimes(s)
{
    while (s.length < 0x8000)
        s = s + s;
    return s;
}

function boom()
{
    var initialText =
        "\u062A" + // ARABIC LETTER TEH
        repeatManyTimes(
            "\u2029" + // PARAGRAPH SEPARATOR
            "\u202D" + // LEFT-TO-RIGHT OVERRIDE
            " "
        ) +
        "1"; // THE LONELIEST ASCII CHARACTER

    var textNode = document.createTextNode(initialText);
    document.getElementById("v").appendChild(textNode);
    document.documentElement.offsetHeight;
    textNode.data = "*" + textNode.data;
}

</script>
</head>

<body onload="boom();">
<div id="v" style="display: table-row; font-size: 500%;"></div>
</body>
</html>