gecko-dev/dom/base/crashtests/675621-1.html

<!DOCTYPE html>
<body>
<script>
document.addEventListener("DOMSubtreeModified", function() {});

document.body.insertAdjacentHTML("afterbegin", "<p>foo");
</script>
Bug 675621 - Reposition update batch to avoid an assertion about removal mutations when inserting a DOM fragment in insertAdjacentHTML. r=Olli.Pettay. 2011-08-05 16:45:31 +00:00			`<!DOCTYPE html>`
			`<body>`
			`<script>`
Bug 1331081 - script generated patch to omit addEventListener/removeEventListener's third parameter when it's false, r=jaws. --HG-- extra : rebase_source : a22344ee1569f58f1f0a01017bfe0d46a6a14602 2017-01-17 10:50:25 +00:00			`document.addEventListener("DOMSubtreeModified", function() {});`
Bug 675621 - Reposition update batch to avoid an assertion about removal mutations when inserting a DOM fragment in insertAdjacentHTML. r=Olli.Pettay. 2011-08-05 16:45:31 +00:00
			`document.body.insertAdjacentHTML("afterbegin", "<p>foo");`
			`</script>`