summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/761861.html
blob: 0c1f3f521056c21881468a1e7a570f9ff4103d4d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<!doctype html>
<script>
function boom() {
  var r = document.documentElement;
  while (r.firstChild) {
    r.removeChild(r.firstChild);
  }

  document.documentElement.contentEditable = "true";
  document.documentElement.appendChild(document.createElement("span"));
  document.documentElement.firstChild.appendChild(document.createTextNode("_"));
  document.execCommand("forwarddelete");
}
</script>
<body onload="boom()">