blob: 8883ea54f3b6bcdc0ffb819db07de16e8a47eea5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
<!DOCTYPE html>
<html class="reftest-wait"><head>
<style>
#b td::first-line { font-size:110%;}
nobr::first-line { font-size:110%;}
#b td::after { content:"anonymous text"; }
nobr::after{ content:"anonymous text"; }
#b::before { content:"before text";}
#b td::before { content:"before text";}
</style>
</head>
<body>
<table style="display: table-row;"></table><nobr style="display: list-item; column-count: 2;">
<table id="b" style="display: inline;"></table>
</nobr>
<br>
This page should not crash Mozilla
<script>
function doe(){
var td = document.createElement('td');;
td.setAttribute('height', '50%');
var tr = document.createElement('tr');;
tr.setAttribute('height', '50%');
tr.appendChild(td);
document.getElementsByTagName('table')[1].appendChild(tr);
document.body.offsetHeight;
var td = document.createElement('td');;
td.setAttribute('height', '50%');
document.getElementsByTagName('tr')[0].appendChild(td);
document.body.offsetHeight;
var td = document.createElement('td');;
td.setAttribute('height', '50%');
document.getElementsByTagName('tr')[0].appendChild(td);
document.body.offsetWidth;
document.documentElement.className = "";
}
setTimeout(doe, 60);
</script>
</body>
</html>
|
