gecko-dev/dom/base/crashtests/420620-1.html
Florian Quèze 85611a7b6d Bug 1331081 - script generated patch to omit addEventListener/removeEventListener's third parameter when it's false, r=jaws.
--HG--
extra : rebase_source : a22344ee1569f58f1f0a01017bfe0d46a6a14602
2017-01-17 11:50:25 +01:00

30 lines
563 B
HTML

<!DOCTYPE html>
<html>
<head>
<script type="text/javascript">
function boom()
{
var a = document.documentElement;
var b = document.body;
document.removeChild(a);
b.contentEditable = "true";
document.appendChild(a);
function t() {
document.removeEventListener("DOMAttrModified", t);
document.removeChild(a);
}
document.addEventListener("DOMAttrModified", t);
document.execCommand("insertunorderedlist", false, "<h1>");
document.removeEventListener("DOMAttrModified", t);
}
</script>
</head>
<body onload="boom()"></body>
</html>