1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/content/base/crashtests/845093-2.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,7 @@ 1.4 +><bdi id=test1><refa id=test2>嵐>></bdi>><h1 id=test3><script> 1.5 +document.addEventListener("DOMContentLoaded", CFcrash, false); 1.6 +function CFcrash() { 1.7 +test1.setAttribute("dir", "invalid"); 1.8 +test2.textContent = " S "; 1.9 +test3.appendChild(test1); 1.10 +}</script>