layout/generic/crashtests/688996-1.html@b8a032363ba2
layout/generic/crashtests/688996-1.html
Thu, 22 Jan 2015 13:21:57 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 22 Jan 2015 13:21:57 +0100
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
- permissions
- -rw-r--r--
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
1 <!DOCTYPE html><html><head><script>
2 function boom()
3 {
4 var a = document.getElementsByTagName('div')[0];
5 var b = a.firstChild;
7 var r = document.createRange();
8 r.setStart(b, 1);
9 r.setEnd(a, 1);
11 var s = document.createRange();
12 s.setStart(b, 0);
13 s.setEnd(a, 1);
14 s.deleteContents();
15 }
16 </script></head><body onload="boom();">
17 <div>b</div>
18 </body></html>
