diff options
Diffstat (limited to '')
| -rw-r--r-- | layout/style/crashtests/1409931.html | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/layout/style/crashtests/1409931.html b/layout/style/crashtests/1409931.html new file mode 100644 index 0000000000..00a8272f94 --- /dev/null +++ b/layout/style/crashtests/1409931.html @@ -0,0 +1,14 @@ +<!doctype html> +<map id="htmlvar00005"> +<area></area> +<input + id="htmlvar00019" + type="image" + usemap="#htmlvar00005" + src="data:image/gif;base64,R0lGODlhIAAgAPIBAGbMzP///wAAADOZZpn/zAAAAAAAAAAAACH5BAAAAAAALAAAAAAgACAAAAOLGLrc/k7ISau9S5DNu/8fICgaYJ5oqqbDGJRrLAMtScw468J5Xr+3nm8XFM5+PGMMWYwxcMyZ40iULQaDhSzqDGBNisGyuhUDrmNb72pWcaXhtpsM/27pVi8UX96rcQpDf3V+QD12d4NKK2+Lc4qOKI2RJ5OUNHyXSDRYnZ6foKAuLxelphMQqaoPCQA7"> +<script> +onload = () => { + document.body.offsetTop; + document.querySelector('area').style.color = "red"; +} +</script> |