summaryrefslogtreecommitdiff
path: root/layout/base/crashtests/635329.html
blob: 15153bda23cf3dbe9c4e83acc91ebaf71491ed5e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<!DOCTYPE html>
<html style="margin-left: 100%">
<head>
<script>

function boom()
{
  document.documentElement.offsetHeight;
  document.body.lastChild.data = "\u062A"; // ARABIC LETTER TEH
  document.body.lastChild.data += "Y";
  document.documentElement.offsetHeight;
}

</script>
</head>

<body onload="boom();"><span>A</span> B C</body>
</html>