summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/574558-1.xhtml
blob: 6aac47072f6a3d67981089e48b875bd46a34bb5d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<html xmlns="http://www.w3.org/1999/xhtml"><head><script>
<![CDATA[

function boom()
{
  document.execCommand("selectAll", false, null);
  document.execCommand("selectAll", false, null);
  document.execCommand("inserthtml", false, "<span><div>");
  var textarea = document.getElementById("textarea");
  var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span");
  textarea.appendChild(span);
}

]]>
</script></head><div contenteditable="true"></div><body onload="boom();"><textarea id="textarea">f</textarea></body></html>