layout/base/crashtests/645193.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

<!DOCTYPE html>
<html style="direction: rtl; -moz-column-width: 1px;"><head><script>

function boom()
{
  document.documentElement.offsetHeight;
  document.body.style.unicodeBidi = "bidi-override";
  document.documentElement.offsetHeight;
}

</script></head><body style="white-space: pre;" onload="boom();">
H


</body></html>