gecko-dev/layout/style/crashtests/1509989.html
Emilio Cobos Álvarez a40dd78966 Bug 1509989 - Make sure the start container is safe to access in nsRange::InsertNode. r=mats
Depends on D13070

Differential Revision: https://phabricator.services.mozilla.com/D13071

--HG--
extra : moz-landing-system : lando
2018-11-27 16:56:26 +00:00

12 lines
175 B
HTML

<script>
function go() {
window.getSelection().getRangeAt(0).insertNode(a);
}
</script>
<body onload=go()>
<dl>
<dd id="a">
<video>
</dd>
<input type="number" autofocus="">