summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1424450.html
blob: bd0fd98a427ab4365de211dfc48d3209b6fb99e1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
<script>
function onLoad() {
  const feComponentTransfer = document.querySelector("feComponentTransfer");
  // For emulating the traditional behavior, collapse Selection to end of the
  // text node in the <feComponentTransfer> which is the deepest last child of
  // the <body>.
  getSelection().collapse(
    feComponentTransfer.firstChild,
    feComponentTransfer.firstChild.length
  );
  getSelection().setPosition(
    document.querySelector("pre[contenteditable]"),
    1
  );
  getSelection().setBaseAndExtent(
    document.querySelector("fieldset"),
    0,
    document.querySelector("use"),
    0
  );
  feComponentTransfer.before(
    document.querySelector("font-face-uri").previousElementSibling
  );

  document.execCommand("removeFormat");
  document.execCommand("hiliteColor", false, "-moz-buttondefault");
  document.execCommand("insertText", false, "");
}
function onBegin() {
  document.querySelector("desc").appendChild(
    document.querySelector("fieldset")
  );
  document.querySelector("span").appendChild(
    document.querySelector("a[hidden][contenteditable]")
  );
}
</script>
<body onload="onLoad()">
<span>
<pre contenteditable>
<fieldset></fieldset>
<iframe srcdoc="H"></iframe>
<a hidden contenteditable>
<svg>
<set onbegin="onBegin()"/>
<use>
<desc></desc>
</use>
<font-face-uri/>
<feComponentTransfer>
</feComponentTransfer></svg></a></pre></body>