dom/mathml/crashtests/770710-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  var mo = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mo");
  var text = document.createTextNode(" ");
  mo.appendChild(text);
  document.body.appendChild(mo);

  window.getSelection().removeAllRanges();
  var r = document.createRange();
  r.setStart(mo.firstChild, 0);
  r.setEnd(mo.firstChild, 1);
  window.getSelection().addRange(r);

  window.getSelection().toString();
}

</script>
</head>
<body onload="boom();"></body>
</html>