summaryrefslogtreecommitdiffstats
path: root/layout/style/crashtests/1546255.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/style/crashtests/1546255.html29
1 files changed, 29 insertions, 0 deletions
diff --git a/layout/style/crashtests/1546255.html b/layout/style/crashtests/1546255.html
new file mode 100644
index 0000000000..ca5c1933c6
--- /dev/null
+++ b/layout/style/crashtests/1546255.html
@@ -0,0 +1,29 @@
+<style id="id_0">
+ @import url('data:;base64,QGN7IGJ9CkRBTVAsIEhUTUwgey');
+</style>
+<script>
+ function start () {
+ style = document.createElement('style')
+ document.head.appendChild(style)
+
+ const o0 = document.getElementById('id_0')
+ const o1 = document.getElementById('id_1')
+
+ const range = new Range()
+ range.selectNode(o1)
+
+ style.sheet.insertRule('@namespace\'', 0)
+ for (let i = 0; i < 7; i++) {
+ range.insertNode(o0)
+ }
+
+ const xhr = new XMLHttpRequest()
+ xhr.open('G', '', false)
+ xhr.send()
+
+ SpecialPowers.InspectorUtils.getCSSStyleRules(document.documentElement)
+ }
+
+ window.addEventListener('load', start)
+</script>
+<li id="id_1">