layout/base/crashtests/629908-1.html


1
2
3
4
5
6
7
8
9

<body onload="die()">
  <script>
    function die() {
      document.body.offsetWidth;
      document.removeChild(document.documentElement);
      document.dir = "rtl";
    }
  </script>
</body>