1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/generic/crashtests/927558.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,24 @@ 1.4 +<!DOCTYPE html> 1.5 +<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> 1.6 +<meta charset="UTF-8"> 1.7 +<script> 1.8 + 1.9 +function boom() 1.10 +{ 1.11 + var range = document.createRange(); 1.12 + range.setStart(document.documentElement, 0); 1.13 + var frame = document.getElementById("f"); 1.14 + var frameSel = frame.contentWindow.getSelection(); 1.15 + document.body.removeChild(frame); 1.16 + frameSel.addRange(range); 1.17 + frameSel.modify("move", "right", "character"); 1.18 +} 1.19 + 1.20 +</script> 1.21 +</head> 1.22 + 1.23 +<body onload="boom();"> 1.24 +<iframe id="f" src="data:text/html,<!doctype html>1"></iframe> 1.25 + 1.26 + 1.27 +</body></html>