Dactyloidae/editor/libeditor/crashtests/769967.xhtml

<html xmlns="http://www.w3.org/1999/xhtml" contenteditable="true" style="user-select: all;"><sub>x</sub><script>
function boom()
{
  window.getSelection().removeAllRanges();
  var r = document.createRange();
  r.setStart(document.documentElement, 0);
  r.setEnd(document.documentElement, 0);
  window.getSelection().addRange(r);

  document.execCommand("subscript", false, null);
  document.execCommand("insertText", false, "y");
}

window.addEventListener("load", boom, false);

</script></html>
Issue #2106 - Follow-up: Additional Un-prefixing 2025-07-07 10:43:13 -07:00			`<html xmlns="http://www.w3.org/1999/xhtml" contenteditable="true" style="user-select: all;"><sub>x</sub><script>`
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00			`function boom()`
			`{`
			`window.getSelection().removeAllRanges();`
			`var r = document.createRange();`
			`r.setStart(document.documentElement, 0);`
			`r.setEnd(document.documentElement, 0);`
			`window.getSelection().addRange(r);`

			`document.execCommand("subscript", false, null);`
			`document.execCommand("insertText", false, "y");`
			`}`

			`window.addEventListener("load", boom, false);`

			`</script></html>`