testing/web-platform/tests/css/css-text/text-autospace/crashtests/text-autospace-shape-cache-crash.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

<!DOCTYPE html>
<meta charset="utf-8">
<span>る</span>
<div>X</div>
<div>X</div>
<script>
document.body.offsetHeight;
const span = document.querySelector('span');
const divs = Array.prototype.slice.call(document.querySelectorAll('div'));
for (const e of divs) {
  const n = span.cloneNode(span);
  e.appendChild(n);
  e.offsetHeight;
}
</script>