Test for bug 828054

2013-01-13 08:09:00 -08:00 · 2013-01-13 08:09:00 -08:00 · 4edda70478
--- a/content/base/crashtests/828054.html
+++ b/content/base/crashtests/828054.html
@ -0,0 +1,19 @@
+<!DOCTYPE html>
+<html>
+<head>
+<script>
+
+function boom()
+{
+  var outer = document.createElement("div");
+  outer.setAttribute("dir", "auto");
+  var inner = document.createElement("div");
+  inner.appendChild(document.createTextNode("A"));
+  outer.appendChild(inner);
+  inner.setAttribute("dir", "auto");
+}
+
+</script>
+</head>
+<body onload="boom();"></body>
+</html>
--- a/content/base/crashtests/crashtests.list
+++ b/content/base/crashtests/crashtests.list
@ -125,3 +125,4 @@ load 822691.html
 load 822723.html
 load 824719.html
 load 827190.html
+load 828054.html