1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/editor/libeditor/text/crashtests/580151-1.xhtml Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,26 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<script> 1.8 + 1.9 +var t; 1.10 + 1.11 +function boom() 1.12 +{ 1.13 + var b = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); 1.14 + t = document.createElementNS("http://www.w3.org/1999/xhtml", "textarea"); 1.15 + b.appendChild(t); 1.16 + document.removeChild(document.documentElement) 1.17 + document.appendChild(b) 1.18 + document.removeChild(document.documentElement) 1.19 + var ns = document.createElementNS("http://www.w3.org/1999/xhtml", "script"); 1.20 + var nt = document.createTextNode("t.appendChild(document.createTextNode(' '));"); 1.21 + ns.appendChild(nt); 1.22 + b.appendChild(ns); 1.23 + document.appendChild(b); 1.24 +} 1.25 + 1.26 +</script> 1.27 +</head> 1.28 +<body onload="boom();"></body> 1.29 +</html>