summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/615450-1.html
blob: fb36bddc93ec3063677a2f888dc36dbddfcb241c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<!DOCTYPE html>
<html contenteditable="true">
<head>
<script>

function boom()
{
  document.documentElement.appendChild(document.body);
  document.documentElement.contentEditable = "false";
  try { document.execCommand("outdent", false, null); } catch(e) { }
  document.body.contentEditable = "true";
  try { document.execCommand("inserthtml", false, "x"); } catch(e) { }
}

</script>
</head>
<body onload="boom();"><div style="margin-left: 40px;"><span contenteditable="true">p q r s</span> T</div></body></html>