layout/generic/crashtests/374420.xhtml@b8a032363ba2
layout/generic/crashtests/374420.xhtml
Thu, 22 Jan 2015 13:21:57 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 22 Jan 2015 13:21:57 +0100
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
- permissions
- -rw-r--r--
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
1 <html xmlns="http://www.w3.org/1999/xhtml" xmlns:mathml="http://www.w3.org/1998/Math/MathML">
2 <title>Testcase bug - Crash [@ nsHTMLReflowState::GetNearestContainingBlock] with testcase using generated content, xbl and mathml</title>
3 <bindings xmlns="http://www.mozilla.org/xbl"><binding id="a">
4 <content><children>
5 <div xmlns="http://www.w3.org/1999/xhtml" style="position: absolute;">
6 <div style="position: absolute;"/>
7 </div>
8 </children></content>
9 </binding></bindings>
10 <style>
11 mtable::after { content:"anonymous text"; }
12 mtable::before { content:"before text"; }
13 </style>
15 <thead style="overflow: scroll;">
16 <mathml:mrow>
17 <mathml:mtable>
18 <tfoot style="-moz-binding: url(#a);" id="a_1">
19 <td style="-moz-binding: url(#a);"/>
20 </tfoot>
21 </mathml:mtable>
22 <td id="a_2"/>
23 </mathml:mrow>
24 </thead>
26 <script xmlns="http://www.w3.org/1999/xhtml">
27 function doe() {
28 document.getElementById('a_1').style.borderCollapse = "";
29 document.documentElement.offsetHeight;
30 document.getElementById('a_2').parentNode.removeChild(document.getElementById('a_2'));
31 }
32 setTimeout(doe, 400);
33 </script>
34 </html>
