mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-10-15 03:39:00 +09:00
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
This commit is contained in:
commit
dcd9973243
150858 changed files with 23884658 additions and 0 deletions
40
layout/generic/crashtests/970710.html
Normal file
40
layout/generic/crashtests/970710.html
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
|
||||
<script>
|
||||
|
||||
var text =
|
||||
"B" +
|
||||
"C" +
|
||||
"D" +
|
||||
"E" +
|
||||
"F" +
|
||||
"\u0643" +
|
||||
"\u0002" +
|
||||
"G" +
|
||||
"\u202D" +
|
||||
"H" +
|
||||
"I" +
|
||||
" " +
|
||||
"\u0007" +
|
||||
"";
|
||||
|
||||
function boom()
|
||||
{
|
||||
var math = document.createElementNS("http://www.w3.org/1998/Math/MathML", "math");
|
||||
var mover = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mover");
|
||||
document.body.appendChild(math);
|
||||
math.appendChild(mover);
|
||||
var textNode = document.createTextNode(text);
|
||||
mover.appendChild(textNode);
|
||||
document.body.style.display = "table-row-group";
|
||||
document.body.style.textAlign = "justify";
|
||||
}
|
||||
|
||||
</script>
|
||||
</head>
|
||||
|
||||
<body onload="boom();"></body>
|
||||
</html>
|
||||
Loading…
Add table
Add a link
Reference in a new issue