summaryrefslogtreecommitdiff
path: root/layout/generic/crashtests/534366-2.html
blob: c90efe00700688cf38110babe52d3d45fcad7217 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<html>
<head>
<style type="text/css">

body { font-family: monospace; width: 4ch; }
body::first-line { }
body *::before { content: 'w';}

</style>

<script type="text/javascript">

function boom()
{
  var de = document.documentElement;
  var body = document.body;

  var span = document.createElementNS("http://www.w3.org/1999/xhtml", "span");
  var r1 = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mrow");
  var mmm = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mmultiscripts");

  body.appendChild(span);
  r1.appendChild(document.createElementNS("http://www.w3.org/1998/Math/MathML", "mrow"));
  body.appendChild(r1);
  body.appendChild(mmm);
  de.offsetHeight;
  r1.appendChild(document.createElementNS("http://www.w3.org/1998/Math/MathML", 'mrow'));
  de.offsetHeight;
  mmm.appendChild(document.createElementNS("http://www.w3.org/1998/Math/MathML", 'mrow'));
  de.offsetHeight;
  
  document.removeChild(de);
  document.appendChild(de);
  de.offsetHeight;
}

window.addEventListener("load", boom, false);

</script>
</head>
<body></body>
</html>