summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/845093-1.html
diff options
context:
space:
mode:
Diffstat (limited to 'dom/base/crashtests/845093-1.html')
-rw-r--r--dom/base/crashtests/845093-1.html10
1 files changed, 10 insertions, 0 deletions
diff --git a/dom/base/crashtests/845093-1.html b/dom/base/crashtests/845093-1.html
new file mode 100644
index 000000000..47658850f
--- /dev/null
+++ b/dom/base/crashtests/845093-1.html
@@ -0,0 +1,10 @@
+<body dir=auto> u
+<script>
+function initCF() {
+setTimeout("CFcrash()", 284);
+}
+document.addEventListener("DOMContentLoaded", initCF, false);
+function CFcrash() {
+try { document.designMode = 'on'; document.execCommand("InsertHTML", false, "world"); document.designMode = 'off'; } catch(e) {}
+try { document.designMode = 'on'; document.execCommand("inserthtml", false, "<span><div>"); } catch(e) {}
+}</script>>