layout/mathml/crashtests/477740-1.xhtml

branch
TOR_BUG_3246
changeset 6
8bccb770b82d
equal deleted inserted replaced
-1:000000000000 0:065828ab0df0
1 <html xmlns="http://www.w3.org/1999/xhtml" xmlns:xbl="http://www.mozilla.org/xbl" xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" xmlns:math="http://www.w3.org/1998/Math/MathML">
2 <head>
3
4 <xbl:bindings><xbl:binding id="res"><xbl:content><xul:resizer><xbl:children/></xul:resizer></xbl:content></xbl:binding></xbl:bindings>
5
6 <script type="text/javascript">
7
8 function boom()
9 {
10 var x = document.getElementById("x");
11
12 var r = document.createRange();
13 r.setEnd(x, 1);
14 r.extractContents();
15
16 x.appendChild(document.createElement('span'));
17 }
18
19 </script>
20 </head>
21
22 <body onload="boom();">
23 <xul:rows id="x" style="-moz-binding: url(#res);"><math:ms/></xul:rows>
24 </body>
25 </html>

mercurial