summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/1606492.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/base/crashtests/1606492.html21
1 files changed, 21 insertions, 0 deletions
diff --git a/layout/base/crashtests/1606492.html b/layout/base/crashtests/1606492.html
new file mode 100644
index 0000000000..3477be3583
--- /dev/null
+++ b/layout/base/crashtests/1606492.html
@@ -0,0 +1,21 @@
+<script>
+function go() {
+ var a = document.createElement("e")
+ document.body.appendChild(a)
+ a.addEventListener("DOMSubtreeModified", () => {
+ c.src = ""
+ d.replaceWith(b)
+ f.srcdoc = ""
+ })
+ document.execCommand("selectAll", false)
+ a.setAttribute("s", "")
+}
+</script>
+<div>
+<output id="b"></output>
+<iframe id="c" sandbox="allow-same-origin"></iframe>
+<ul contenteditable="true">
+<li id="d">A</li>
+</ul>
+<iframe id="f"></iframe>
+<audio onloadstart="go()" src="">