summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/845093-2.html
diff options
context:
space:
mode:
Diffstat (limited to 'dom/base/crashtests/845093-2.html')
-rw-r--r--dom/base/crashtests/845093-2.html7
1 files changed, 7 insertions, 0 deletions
diff --git a/dom/base/crashtests/845093-2.html b/dom/base/crashtests/845093-2.html
new file mode 100644
index 000000000..2d513449a
--- /dev/null
+++ b/dom/base/crashtests/845093-2.html
@@ -0,0 +1,7 @@
+><bdi id=test1><refa id=test2>&#xf921;>></bdi>><h1 id=test3><script>
+document.addEventListener("DOMContentLoaded", CFcrash, false);
+function CFcrash() {
+test1.setAttribute("dir", "invalid");
+test2.textContent = " &#xf851;S ";
+test3.appendChild(test1);
+}</script>