mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-09-09 09:18:42 +09:00
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
This commit is contained in:
commit
dcd9973243
150858 changed files with 23884658 additions and 0 deletions
31
xpcom/string/crashtests/395651-1.html
Normal file
31
xpcom/string/crashtests/395651-1.html
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
<html>
|
||||
<head>
|
||||
<script>
|
||||
|
||||
function X() { dump("X\n"); }
|
||||
function Y() { dump("Y\n"); }
|
||||
|
||||
function boom()
|
||||
{
|
||||
dump("Start9\n");
|
||||
|
||||
var div = document.getElementById("v");
|
||||
|
||||
var textNode = document.createTextNode(String.fromCharCode(0xDAAF)); // high surrogate
|
||||
div.appendChild(textNode);
|
||||
|
||||
document.addEventListener("DOMCharacterDataModified", X, true);
|
||||
textNode.data += 'B';
|
||||
document.removeEventListener("DOMCharacterDataModified", X, true);
|
||||
|
||||
document.addEventListener("DOMAttrModified", Y, true);
|
||||
textNode.data += String.fromCharCode(0xDF53); // low surrogate
|
||||
document.removeEventListener("DOMAttrModified", Y, true);
|
||||
}
|
||||
|
||||
</script>
|
||||
</head>
|
||||
|
||||
<body onload="boom();"><div id="v"></div></body>
|
||||
|
||||
</html>
|
||||
Loading…
Add table
Add a link
Reference in a new issue