1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/editor/libeditor/html/crashtests/420439.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,30 @@
1.4 +<html>
1.5 +<head>
1.6 +<script type="text/javascript">
1.7 +
1.8 +function boom()
1.9 +{
1.10 + function x()
1.11 + {
1.12 + document.removeEventListener("DOMAttrModified", x, false);
1.13 + document.execCommand("backcolor", false, "green");
1.14 + }
1.15 +
1.16 + document.getElementById("td").focus();
1.17 +
1.18 + document.addEventListener("DOMAttrModified", x, false);
1.19 + try {
1.20 + document.execCommand("subscript", false, null);
1.21 + } catch(e) {
1.22 + }
1.23 + document.removeEventListener("DOMAttrModified", x, false);
1.24 +}
1.25 +
1.26 +</script>
1.27 +</head>
1.28 +
1.29 +<body contenteditable="true" onload="setTimeout(boom, 30);">
1.30 +<table><tbody contenteditable="false"><tr><td contenteditable="true" id="td"></td></tr></tbody></table>
1.31 +</body>
1.32 +
1.33 +</html>
