summaryrefslogtreecommitdiffstats
path: root/layout/svg/crashtests/1563779.html
blob: 4c51d0884da36006faae57424a6af309e949fdb9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<script id="a">
let count = 0;
function go() {
  if (count++ == 3)
    return;
  try { a.appendChild(c) } catch(e) { }
  try { window.getSelection().getRangeAt(0).insertNode(b) } catch(e) { }
  try { d.selectSubString(0,-1) } catch(e) { }
  document.documentElement.style.display = "none"
  document.documentElement.getBoundingClientRect()
  document.documentElement.style.display = ""
}
</script>
<pre id="b" style="display:contents">a</pre>
<span id="c">
<style onload="go()"></style>
</span>
<svg>
<text id="d"><textPath xml:space="preserve">