diff options
Diffstat (limited to '')
| -rw-r--r-- | layout/style/crashtests/1066089-1.html | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/layout/style/crashtests/1066089-1.html b/layout/style/crashtests/1066089-1.html new file mode 100644 index 0000000000..019a20a7f8 --- /dev/null +++ b/layout/style/crashtests/1066089-1.html @@ -0,0 +1,21 @@ +<!DOCTYPE html> +<html> +<head> +<meta charset="utf8"> +<style> + @counter-style triangle { symbols: a; } + @counter-style disc { system: extends triangle; } +</style> +<script> + function crash() { + var styleNode = document.createElement("style"); + styleNode.textContent = + "@counter-style triangle { symbols: b; } " + + "@counter-style disc { system: extends triangle; } " + + "ul {}"; + document.getElementsByTagName("head")[0].appendChild(styleNode); + } +</script> +</head> +<body onload="crash()"> + <ul><li>Don't technically need any text here, but here's some anyway. |