My name is Inigo Montoya. You crashed my browser. Prepare to hang.

2007-12-15 20:28:25 -08:00 · 2007-12-15 20:28:25 -08:00 · c365252ded
--- a/layout/base/crashtests/310267-1.xml
+++ b/layout/base/crashtests/310267-1.xml
@ -0,0 +1,32 @@
+<html xmlns="http://www.w3.org/1999/xhtml" style="white-space: pre;" class="reftest-wait"><script><![CDATA[
+
+function init() { 
+  var docElt = document.documentElement;
+  var firstText = docElt.childNodes[1];
+  var div = docElt.childNodes[2];
+  var bidiText = div.childNodes[0];
+
+  function first() 
+  {
+    docElt.insertBefore(div, firstText);
+    docElt.insertBefore(bidiText, div);
+  }
+  
+  function second()
+  {
+    docElt.insertBefore(div, firstText);
+    docElt.appendChild(bidiText);
+    document.documentElement.removeAttribute("class");
+  }
+  
+  first();
+  setTimeout(second, 100);
+
+}
+
+window.addEventListener("load", init, false);
+
+]]></script>
+
+A<div>׳
+Z</div></html>
--- a/layout/base/crashtests/crashtests.list
+++ b/layout/base/crashtests/crashtests.list
@ -3,6 +3,7 @@ load 143862-2.html
 load 243159-1.html
 load 243159-2.xhtml
 load 306940-1.html
+load 310267-1.xml
 load 310638-1.svg
 load 310638-2.html
 load 313086-1.xml