1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/762764-1.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,18 @@ 1.4 +<!DOCTYPE html> 1.5 +<script> 1.6 + 1.7 +function boom() 1.8 +{ 1.9 + document.documentElement.removeChild(document.body); 1.10 + var newBody = document.createElementNS("http://www.w3.org/1999/xhtml", "body"); 1.11 + document.documentElement.appendChild(newBody); 1.12 + newBody.contentEditable = "true"; 1.13 + document.execCommand("inserthtml", false, "<textarea>a</textarea>"); 1.14 + document.execCommand("insertimage", false, "1.jpg"); 1.15 + try { document.execCommand("forwardDelete", false, null); } catch(e) { } 1.16 + document.execCommand("inserthtml", false, "x<span><\/span>y"); 1.17 +} 1.18 + 1.19 +</script> 1.20 + 1.21 +<body onload="boom();"></body>