summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/1446451.html
diff options
context:
space:
mode:
Diffstat (limited to 'editor/libeditor/crashtests/1446451.html')
-rw-r--r--editor/libeditor/crashtests/1446451.html13
1 files changed, 13 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/1446451.html b/editor/libeditor/crashtests/1446451.html
new file mode 100644
index 0000000000..56c887dc3b
--- /dev/null
+++ b/editor/libeditor/crashtests/1446451.html
@@ -0,0 +1,13 @@
+<script>
+function onLoad() {
+ // For emulating the traditional behavior, collapse Selection to end of the
+ // text node in the <dialog> which is the deepest last child of the <body>.
+ const dialog = document.querySelector("dialog");
+ getSelection().collapse(dialog.lastChild, dialog.lastChild.length);
+ document.execCommand("insertImage", false, "o")
+}
+</script>
+<body onload="onLoad()">
+<meter contenteditable>
+<dialog>
+</dialog></meter></body>