diff options
Diffstat (limited to 'testing/web-platform/tests/domxpath/xpath-evaluate-crash.html')
| -rw-r--r-- | testing/web-platform/tests/domxpath/xpath-evaluate-crash.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/testing/web-platform/tests/domxpath/xpath-evaluate-crash.html b/testing/web-platform/tests/domxpath/xpath-evaluate-crash.html new file mode 100644 index 0000000000..5303d85ad3 --- /dev/null +++ b/testing/web-platform/tests/domxpath/xpath-evaluate-crash.html @@ -0,0 +1,20 @@ +<!DOCTYPE html> +<meta charset="utf-8"> +<title>Evaluating XPath expressions with orhpaned Attr as context node doesn't crash</title> +<link rel=author href="mailto:jarhar@chromium.org"> +<link rel=help href="https://bugs.chromium.org/p/chromium/issues/detail?id=1236967"> +<script src="/resources/testharnessreport.js"></script> +<body> +<script> +for (const expression of [ + "..", + "parent", + "ancestor::*", + "ancestor-or-self::*", + "following::*", + "preceding::*", +]) { + const orphanedAttr = document.createAttribute("foo"); + new XPathEvaluator().evaluate(expression, orphanedAttr, null, 2); +} +</script> |