gecko-dev/dom/base/crashtests/1406109-1.html
Cameron McCormack c970a23771 Bug 1406109 - Return early after selector parsing failure in matches(). r=emilio
MozReview-Commit-ID: 6qXvrQ0eigI

--HG--
extra : rebase_source : 2355ccfef79e657e04bbaddfcaa9da63015076e5
2017-10-06 14:16:13 +08:00

11 lines
205 B
HTML

<html>
<head>
<script>
function jsfuzzer() {
try { a.matches("1"); } catch(e) { }
try { document.createElement("p").closest("1"); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<feBlend id="a" />