summaryrefslogtreecommitdiffstats
path: root/parser/htmlparser/tests/crashtests/1604307-1.html
diff options
context:
space:
mode:
Diffstat (limited to 'parser/htmlparser/tests/crashtests/1604307-1.html')
-rw-r--r--parser/htmlparser/tests/crashtests/1604307-1.html10
1 files changed, 10 insertions, 0 deletions
diff --git a/parser/htmlparser/tests/crashtests/1604307-1.html b/parser/htmlparser/tests/crashtests/1604307-1.html
new file mode 100644
index 0000000000..28a2e7caf0
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/1604307-1.html
@@ -0,0 +1,10 @@
+<script>
+function go() {
+ b.crossOrigin = ""
+ document.execCommand("insertHTML", false, c.innerHTML)
+}
+</script>
+<image id="b" src="data:;base64,R0lGODlhIAAgAPIBAGbMzP///wAAADOZZpn/zAAAAAAAAAAAACH5BAAAAAAALAAAAAAgACAAAA" onload="go()"></image>
+<data id="c">
+<s contenteditable="true"
+<!-- A -->