diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 19:33:14 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 19:33:14 +0000 |
commit | 36d22d82aa202bb199967e9512281e9a53db42c9 (patch) | |
tree | 105e8c98ddea1c1e4784a60a5a6410fa416be2de /layout/generic/crashtests/507566.html | |
parent | Initial commit. (diff) | |
download | firefox-esr-36d22d82aa202bb199967e9512281e9a53db42c9.tar.xz firefox-esr-36d22d82aa202bb199967e9512281e9a53db42c9.zip |
Adding upstream version 115.7.0esr.upstream/115.7.0esrupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | layout/generic/crashtests/507566.html | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/layout/generic/crashtests/507566.html b/layout/generic/crashtests/507566.html new file mode 100644 index 0000000000..1fbdba5c8b --- /dev/null +++ b/layout/generic/crashtests/507566.html @@ -0,0 +1,33 @@ +<!DOCTYPE HTML> +<html> +<head> +<script type="text/javascript"> + +var count = 0; + +function boom() +{ + var r = document.body; while(r.firstChild) { r.removeChild(r.firstChild); } + + document.body = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); + var div = document.createElementNS("http://www.w3.org/1999/xhtml", "div"); + var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span"); + span.setAttributeNS(null, "contenteditable", "true"); + document.documentElement.appendChild(span); + (document.body || document.documentElement).appendChild(div); + var text = document.createTextNode("\u200F\uE8D4"); + document.body.appendChild(text); + document.documentElement.appendChild(document.body); + document.documentElement.offsetHeight; + text.data += "\uF0C5"; + document.execCommand("selectAll", false, null); + + if (++count < 20) + setTimeout(boom, 0); +} + +</script> +</head> + +<body onload="boom();"></body> +</html> |