summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/407079-1.html
blob: 8b0e36cd655a51da8cc7df1740eed9f456bebf83 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<html>
<head>
<script type="text/javascript">

function boom()
{
  document.execCommand("selectAll", false, null);
  document.execCommand("inserthtml", false, "<p>");
}

</script>
</head>

<body onload="boom();"><textarea contenteditable="true"></textarea></body>
</html>