editor/libeditor/crashtests/766305.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  var s = "x";
  for (var i = 0; i < 15; ++i)
    s = s + s;
  var t = document.createTextNode(s);
  document.body.appendChild(t);
  window.getSelection().collapse(t, s.length);
  document.execCommand("insertText", false, "a");
}

</script>
</head>

<body contenteditable="true" onload="boom();"></body>
</html>