mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-19 00:05:36 +00:00
86506e2303
Add minimal crash test for this. When removing a line, this doesn't occur. MozReview-Commit-ID: JqS2E8q47ML --HG-- extra : rebase_source : 322a77cbc49e29bbd6b705650485634dd4801b8b
29 lines
747 B
HTML
29 lines
747 B
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<script type="application/javascript">
|
|
document.designMode = "on";
|
|
let selection = window.getSelection();
|
|
|
|
let foo = document.createElement('foo');
|
|
let div = document.createElement('div');
|
|
document.documentElement.appendChild(foo);
|
|
document.documentElement.appendChild(div);
|
|
foo.outerHTML = '<foo>';
|
|
|
|
let range = document.createRange();
|
|
range.selectNode(div);
|
|
selection.addRange(range);
|
|
range.setStart(foo, 0);
|
|
|
|
range = document.createRange();
|
|
range.selectNode(document.documentElement);
|
|
selection.addRange(range);
|
|
|
|
document.execCommand('insertparagraph', false, null);
|
|
</script>
|
|
</head>
|
|
<body>
|
|
</body>
|
|
</html>
|