summaryrefslogtreecommitdiffstats
path: root/layout/svg/crashtests/1563779.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--layout/svg/crashtests/1563779.html19
1 files changed, 19 insertions, 0 deletions
diff --git a/layout/svg/crashtests/1563779.html b/layout/svg/crashtests/1563779.html
new file mode 100644
index 0000000000..4c51d0884d
--- /dev/null
+++ b/layout/svg/crashtests/1563779.html
@@ -0,0 +1,19 @@
+<script id="a">
+let count = 0;
+function go() {
+ if (count++ == 3)
+ return;
+ try { a.appendChild(c) } catch(e) { }
+ try { window.getSelection().getRangeAt(0).insertNode(b) } catch(e) { }
+ try { d.selectSubString(0,-1) } catch(e) { }
+ document.documentElement.style.display = "none"
+ document.documentElement.getBoundingClientRect()
+ document.documentElement.style.display = ""
+}
+</script>
+<pre id="b" style="display:contents">a</pre>
+<span id="c">
+<style onload="go()"></style>
+</span>
+<svg>
+<text id="d"><textPath xml:space="preserve">