summaryrefslogtreecommitdiff
path: root/dom/base/crashtests/841205.html
blob: 4de533a8856e4ea3540e042cd01da377ad78e7af (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  var b = document.createElement('bdi');
  var c = document.createElement('div');
  var d = document.createElement('div');

  b.appendChild(c);
  c.appendChild(d);
  b.removeChild(c);
  d.appendChild(b);
  document.createElement('div').appendChild(c);
  b.appendChild(document.createElement('div'));

  b.setAttribute('dir', "auto");
}

</script>
</head>
<body onload="boom();"></body>
</html>