gecko-dev/editor/libeditor/crashtests/1405897.html
Makoto Kato afbbfcc910 Bug 1405897 - Move assertion before setting resizer attribute. r=masayuki
This assertion was added by review comment of bug 1487945. Since mutation event
handler of this test case hides resizer, this case hits this assertion.

Although 4th parameter of SetAttr can control mutation event, if this event
isn't fired, another test case (layout/base/tests/test_bug558663.html) becomes
failure.

So we should move the assertion before setting resizer attribute.

Differential Revision: https://phabricator.services.mozilla.com/D1854

--HG--
extra : moz-landing-system : lando
2018-06-29 04:47:21 +00:00

17 lines
375 B
HTML

<style>
* { position: absolute; }
</style>
<script>
function jsfuzzer() {
del1.addEventListener("DOMSubtreeModified", () => {
document.execCommand("italic", false);
document.execCommand("selectAll", false);
});
a1.replaceChild(iframe1, a1.childNodes[0]);
}
</script>
<body onload=jsfuzzer()>
<a contenteditable="" id="a1">
<del id="del1">
<iframe id="iframe1">