diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-21 11:44:51 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-21 11:44:51 +0000 |
| commit | 9e3c08db40b8916968b9f30096c7be3f00ce9647 (patch) | |
| tree | a68f146d7fa01f0134297619fbe7e33db084e0aa /layout/generic/crashtests/507566.html | |
| parent | Initial commit. (diff) | |
| download | thunderbird-9e3c08db40b8916968b9f30096c7be3f00ce9647.tar.xz thunderbird-9e3c08db40b8916968b9f30096c7be3f00ce9647.zip | |
Adding upstream version 1:115.7.0.upstream/1%115.7.0upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'layout/generic/crashtests/507566.html')
| -rw-r--r-- | layout/generic/crashtests/507566.html | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/layout/generic/crashtests/507566.html b/layout/generic/crashtests/507566.html new file mode 100644 index 0000000000..1fbdba5c8b --- /dev/null +++ b/layout/generic/crashtests/507566.html @@ -0,0 +1,33 @@ +<!DOCTYPE HTML> +<html> +<head> +<script type="text/javascript"> + +var count = 0; + +function boom() +{ + var r = document.body; while(r.firstChild) { r.removeChild(r.firstChild); } + + document.body = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); + var div = document.createElementNS("http://www.w3.org/1999/xhtml", "div"); + var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span"); + span.setAttributeNS(null, "contenteditable", "true"); + document.documentElement.appendChild(span); + (document.body || document.documentElement).appendChild(div); + var text = document.createTextNode("\u200F\uE8D4"); + document.body.appendChild(text); + document.documentElement.appendChild(document.body); + document.documentElement.offsetHeight; + text.data += "\uF0C5"; + document.execCommand("selectAll", false, null); + + if (++count < 20) + setTimeout(boom, 0); +} + +</script> +</head> + +<body onload="boom();"></body> +</html> |