Bug 1228882 - Add a crashtest based on the test case for the bug

Differential Revision: https://phabricator.services.mozilla.com/D66224 --HG-- extra : moz-landing-system : lando
2020-03-10 13:54:45 +00:00 · 2020-03-10 13:54:45 +00:00 · 84f555ba58
--- a/dom/base/crashtests/1228882.html
+++ b/dom/base/crashtests/1228882.html
@ -0,0 +1,6 @@
+<!DOCTYPE html>
+<html>
+<body onload="b.dir='auto'; a.dir='auto'; b.remove();">
+<bdi id="a"><span id="b">f</span>g</bdi>
+</body>
+</html>
--- a/dom/base/crashtests/crashtests.list
+++ b/dom/base/crashtests/crashtests.list
@ -189,6 +189,7 @@ load 1154598.xhtml
 load 1157995.html
 load 1158412.html
 load 1181619.html
+load 1228882.html
 load 1230422.html
 load 1251361.html
 load 1281715.html