Bug 1404316 - Crashtest. r=me

MozReview-Commit-ID: LCbXnY8nqmJ
2017-09-29 11:18:30 -07:00 · 2017-09-29 11:18:30 -07:00 · b082b896b7
--- a/layout/style/crashtests/1404316.html
+++ b/layout/style/crashtests/1404316.html
@ -0,0 +1,20 @@
+<html contenteditable="">
+  <style></style>
+  <script>
+  try { o1 = document.getSelection() } catch(e) { }
+  try { o2 = document.createElement('table') } catch(e) { }
+  try { o3 = document.createElement('r') } catch(e) { }
+  try { o4 = document.createElement('l') } catch(e) { }
+  try { o5 = document.createElement('k') } catch(e) { }
+  try { o6 = document.createElement('u') } catch(e) { }
+  try { document.documentElement.appendChild(o2) } catch(e) { }
+  try { document.documentElement.appendChild(o3) } catch(e) { }
+  try { document.documentElement.appendChild(o4) } catch(e) { }
+  try { document.documentElement.appendChild(o5) } catch(e) { }
+  try { document.designMode = "on"; } catch(e) { }
+  try { document.designMode = "off"; } catch(e) { }
+  try { o1.selectAllChildren(o2) } catch(e) { }
+  try { document.styleSheets[0].insertRule("e{", 0); } catch(e) { }
+  try { document.documentElement.appendChild(o6) } catch(e) { }
+  </script>
+</html>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@ -239,3 +239,4 @@ load 1403465.html
 load 1403592.html
 load 1403615.html
 load 1403712.html
+load 1404316.html