1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/editor/libeditor/base/crashtests/772282.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,27 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<script> 1.8 + 1.9 +function boom() 1.10 +{ 1.11 + var root = document.documentElement; 1.12 + while(root.firstChild) { root.removeChild(root.firstChild); } 1.13 + var body = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); 1.14 + body.setAttributeNS(null, "contenteditable", "true"); 1.15 + var img = document.createElementNS("http://www.w3.org/1999/xhtml", "img"); 1.16 + body.appendChild(img); 1.17 + root.appendChild(body); 1.18 + document.removeChild(root); 1.19 + document.appendChild(root); 1.20 + document.execCommand("insertText", false, "5"); 1.21 + document.execCommand("selectAll", false, null); 1.22 + document.execCommand("insertParagraph", false, null); 1.23 + document.execCommand("increasefontsize", false, null); 1.24 +} 1.25 + 1.26 +</script> 1.27 +</head> 1.28 + 1.29 +<body onload="boom();"></body> 1.30 +</html>