diff options
Diffstat (limited to 'dom/html/crashtests/1429783.html')
-rw-r--r-- | dom/html/crashtests/1429783.html | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/dom/html/crashtests/1429783.html b/dom/html/crashtests/1429783.html new file mode 100644 index 0000000000..211f9e7ee2 --- /dev/null +++ b/dom/html/crashtests/1429783.html @@ -0,0 +1,19 @@ +<!DOCTYPE HTML> +<html> + <head> + <script> + try { o2 = document.createElement('textarea') } catch(e) { } + try { o3 = document.getSelection() } catch(e) { } + try { document.documentElement.appendChild(o2) } catch(e) { } + try { o2.select() } catch(e) { } + try { o4 = o3.getRangeAt(0) } catch(e) { } + try { o5 = o4.commonAncestorContainer } catch(e) { } + try { o6 = o4.commonAncestorContainer } catch(e) { } + try { document.documentElement.after("", o5, "") } catch(e) { } + try { o4 = document.createElement('t') } catch(e) { } + try { document.appendChild(o4); } catch(e) { } + try { document.write(atob("PHNjcmlwdCBzcmM9Jyc+PC9zY3JpcHQ+Cg==")) } catch(e) { } + try { document.replaceChild(o6, document.documentElement); } catch(e) { } + </script> + </head> +</html> |