summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/1156588.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/base/crashtests/1156588.html26
1 files changed, 26 insertions, 0 deletions
diff --git a/layout/base/crashtests/1156588.html b/layout/base/crashtests/1156588.html
new file mode 100644
index 0000000000..b48bc3af25
--- /dev/null
+++ b/layout/base/crashtests/1156588.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+<meta charset="UTF-8">
+<script>
+
+function boom()
+{
+ document.documentElement.offsetHeight;
+ document.getElementById("x").style.content = "'x'";
+ document.documentElement.offsetHeight;
+ document.getElementById("s").remove();
+ document.documentElement.offsetHeight;
+}
+
+</script>
+</head>
+
+<body onload="boom();">
+
+<div style="display: inline-grid; white-space: pre;"><div id="x"><span>
+<span>
+</span><span id="s"></span></span></div></div>
+
+</body>
+</html>