mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-12-02 01:48:05 +00:00
Adding test for bug 457537
This commit is contained in:
parent
54418bdd3e
commit
e74ce779cc
17
layout/forms/crashtests/457537-1.html
Normal file
17
layout/forms/crashtests/457537-1.html
Normal file
@ -0,0 +1,17 @@
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<script type="text/javascript">
|
||||
|
||||
function boom()
|
||||
{
|
||||
window.addEventListener("DOMAttrModified", function(){}, false);
|
||||
document.body.appendChild(document.createElement("input"));
|
||||
}
|
||||
|
||||
</script>
|
||||
</head>
|
||||
|
||||
<body onload="boom();"></body>
|
||||
|
||||
</html>
|
17
layout/forms/crashtests/457537-2.html
Normal file
17
layout/forms/crashtests/457537-2.html
Normal file
@ -0,0 +1,17 @@
|
||||
<!DOCTYPE html>
|
||||
<html>
|
||||
<head>
|
||||
<script type="text/javascript">
|
||||
|
||||
function boom()
|
||||
{
|
||||
window.addEventListener("DOMAttrModified", function(){}, false);
|
||||
document.body.appendChild(document.createElement("isindex"));
|
||||
}
|
||||
|
||||
</script>
|
||||
</head>
|
||||
|
||||
<body onload="boom();"></body>
|
||||
|
||||
</html>
|
@ -23,3 +23,5 @@ load 393656-2.xhtml
|
||||
load 404118-1.html
|
||||
load 404123-1.html
|
||||
load 455451-1.html
|
||||
load 457537-1.html
|
||||
load 457537-2.html
|
||||
|
Loading…
Reference in New Issue
Block a user