summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/580504-1.xhtml
diff options
context:
space:
mode:
Diffstat (limited to 'layout/generic/crashtests/580504-1.xhtml')
-rw-r--r--layout/generic/crashtests/580504-1.xhtml22
1 files changed, 22 insertions, 0 deletions
diff --git a/layout/generic/crashtests/580504-1.xhtml b/layout/generic/crashtests/580504-1.xhtml
new file mode 100644
index 0000000000..62ad75192f
--- /dev/null
+++ b/layout/generic/crashtests/580504-1.xhtml
@@ -0,0 +1,22 @@
+<html xmlns="http://www.w3.org/1999/xhtml" style="column-width: 1px">
+<head>
+
+<script>
+<![CDATA[
+
+function boom()
+{
+ document.getElementById("d").focus();
+ document.execCommand("inserthtml", false, "<i><font><html><form>a</form></font>");
+ document.execCommand("justifyright", false, "#ffddff");
+}
+
+window.addEventListener("load", boom);
+
+]]>
+</script>
+
+</head>
+
+<div style="position: relative;"><div style="float: left; padding: 10px 20px 0pt;"><div contenteditable="true" style="position: absolute;" id="d"></div></div><div style="clear: both; padding: 20px 20px 15px;"></div></div>
+</html>