summaryrefslogtreecommitdiffstats
path: root/gfx/tests/crashtests/385423-2.html
diff options
context:
space:
mode:
Diffstat (limited to 'gfx/tests/crashtests/385423-2.html')
-rw-r--r--gfx/tests/crashtests/385423-2.html17
1 files changed, 17 insertions, 0 deletions
diff --git a/gfx/tests/crashtests/385423-2.html b/gfx/tests/crashtests/385423-2.html
new file mode 100644
index 000000000..7de8bdaaf
--- /dev/null
+++ b/gfx/tests/crashtests/385423-2.html
@@ -0,0 +1,17 @@
+<html class="reftest-wait">
+<head>
+<script>
+function boom()
+{
+ var div = document.getElementById("div")
+ div.appendChild(document.createTextNode(String.fromCharCode(0x076F) + String.fromCharCode(13) + String.fromCharCode(0x076F)));
+
+ document.documentElement.removeAttribute("class");
+}
+</script>
+
+</head>
+<body onload="setTimeout(boom, 10);">
+<div style="text-transform: lowercase" id="div"></div>
+</body>
+</html> \ No newline at end of file