summaryrefslogtreecommitdiff
path: root/layout/base/crashtests/406675-1.html
blob: 779d82b675ce0394369e462b09afad37e3780108 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<html>
<head>
<script type="text/javascript">

function boom()
{
  var textNode = document.createTextNode("\u202B" + "A B");
  document.body.appendChild(textNode);
  document.body.offsetHeight;
  textNode.data = "\u202B" + " C";
}

</script>
</head>

<body onload="boom();"></body>
</html>