summaryrefslogtreecommitdiffstats
path: root/layout/generic/crashtests/868906.html
diff options
context:
space:
mode:
authorMatt A. Tobin <mattatobin@localhost.localdomain>2018-02-02 04:16:08 -0500
committerMatt A. Tobin <mattatobin@localhost.localdomain>2018-02-02 04:16:08 -0500
commit5f8de423f190bbb79a62f804151bc24824fa32d8 (patch)
tree10027f336435511475e392454359edea8e25895d /layout/generic/crashtests/868906.html
parent49ee0794b5d912db1f95dce6eb52d781dc210db5 (diff)
downloadUXP-5f8de423f190bbb79a62f804151bc24824fa32d8.tar
UXP-5f8de423f190bbb79a62f804151bc24824fa32d8.tar.gz
UXP-5f8de423f190bbb79a62f804151bc24824fa32d8.tar.lz
UXP-5f8de423f190bbb79a62f804151bc24824fa32d8.tar.xz
UXP-5f8de423f190bbb79a62f804151bc24824fa32d8.zip
Add m-esr52 at 52.6.0
Diffstat (limited to 'layout/generic/crashtests/868906.html')
-rw-r--r--layout/generic/crashtests/868906.html54
1 files changed, 54 insertions, 0 deletions
diff --git a/layout/generic/crashtests/868906.html b/layout/generic/crashtests/868906.html
new file mode 100644
index 000000000..f0b92c5a6
--- /dev/null
+++ b/layout/generic/crashtests/868906.html
@@ -0,0 +1,54 @@
+<!DOCTYPE html>
+<html class="reftest-wait">
+<head>
+<meta charset="UTF-8">
+<script>
+
+function boom()
+{
+ var root = document.documentElement;
+ while(root.firstChild) { root.removeChild(root.firstChild); }
+ root.appendChild(document.createElement("body"));
+ root.offsetHeight;
+
+ var bigText = document.createTextNode("");
+ bigText.data += "\u202D";
+ bigText.data += "A";
+ bigText.data += "\x1C";
+ bigText.data += "\u062A";
+ bigText.data += "E";
+ bigText.data += "\u062E";
+ bigText.data += " ";
+ bigText.data += "\u202D";
+ bigText.data += "X";
+ bigText.data += "\x1C";
+ bigText.data += "Y";
+ root.appendChild(bigText);
+
+ var smallText = document.createTextNode("Z");
+ root.appendChild(smallText);
+
+ root.focus();
+
+ function del()
+ {
+ var range = document.createRange();
+ range.setStart(root, 0);
+ range.setEnd(bigText, bigText.data.length);
+ range.deleteContents();
+ }
+
+ del();
+
+ function finish() {
+ document.documentElement.removeAttribute('class');
+ }
+
+ setTimeout(finish, 0);
+}
+
+</script>
+</head>
+
+<body onload="boom();"></body>
+</html>