summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/1419799.html
diff options
context:
space:
mode:
authorMatt A. Tobin <email@mattatobin.com>2020-04-17 07:23:48 -0400
committerMatt A. Tobin <email@mattatobin.com>2020-04-17 07:23:48 -0400
commitf0b7ba1e2b49858ce2755c61beebe3694cae882f (patch)
tree9e77a30d9d833bcbde854db394148db523450526 /dom/base/crashtests/1419799.html
parent003e537dcbaa524fcaa5e36a834278a00653bdef (diff)
downloadUXP-f0b7ba1e2b49858ce2755c61beebe3694cae882f.tar
UXP-f0b7ba1e2b49858ce2755c61beebe3694cae882f.tar.gz
UXP-f0b7ba1e2b49858ce2755c61beebe3694cae882f.tar.lz
UXP-f0b7ba1e2b49858ce2755c61beebe3694cae882f.tar.xz
UXP-f0b7ba1e2b49858ce2755c61beebe3694cae882f.zip
Bug 1419799 - Fix nsContentUtils::IsInSameAnonymousTree in Shadow DOM
Tag #1375
Diffstat (limited to 'dom/base/crashtests/1419799.html')
-rw-r--r--dom/base/crashtests/1419799.html17
1 files changed, 17 insertions, 0 deletions
diff --git a/dom/base/crashtests/1419799.html b/dom/base/crashtests/1419799.html
new file mode 100644
index 000000000..b6d34a1a9
--- /dev/null
+++ b/dom/base/crashtests/1419799.html
@@ -0,0 +1,17 @@
+<html>
+ <head>
+ <script>
+ try { o1 = document.createElement('textarea') } catch(e) { }
+ try { o2 = document.createElement('div') } catch(e) { }
+ try { o3 = document.createElement('map') } catch(e) { }
+ try { document.documentElement.appendChild(o2) } catch(e) { }
+ try { o2.appendChild(o1) } catch(e) { }
+ try { document.documentElement.getClientRects() } catch(e) { }
+ try { o4 = o2.attachShadow({ mode: "open" }); } catch(e) { }
+ try { o1.appendChild(o3) } catch(e) { }
+ try { o5 = o3.parentElement } catch(e) { }
+ try { o3.outerHTML = "\n" } catch(e) { }
+ try { o4.prepend("", o5, "") } catch(e) { }
+ </script>
+ </head>
+</html>