Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: gfx/tests/crashtests/crashtests.list
<!DOCTYPE html>
<html>
<head>
<script type="text/javascript">
function boom()
{
var w = document.getElementById("w");
var q = document.getElementById("q");
var e = document.createTextNode("");
document.documentElement.appendChild(document.body);
w.appendChild(e);
document.documentElement.offsetHeight;
w.removeChild(q);
document.documentElement.offsetHeight;
e.data += " x ";
}
</script>
</head>
<body onload="boom();"><span id="w">s‮<span id="q"></span><div></div><span>a</span></span></body>
</html>