gecko-dev/editor/libeditor/crashtests/1402904.html

32 строки
865 B
HTML

<script>
function jsfuzzer() {
var option = document.getElementById("option");
option.addEventListener("click", () => {
document.execCommand("forwardDelete", false);
});
var li2 = document.getElementById("li2");
li2.addEventListener("DOMNodeInserted", () => {
option.click();
});
var select = document.getElementById("select");
select.parentElement.setAttribute("onpageshow", "onPageShow()");
}
function onPageShow() {
var li1 = document.getElementById("li1");
li1.addEventListener("DOMSubtreeModified", () => {
document.execCommand("selectAll", false);
document.execCommand("indent", false);
});
li1.appendChild(document.createElement("legend"));
}
</script>
<body onload=jsfuzzer()>
<select id="select">
<option id="option"></option>
</select>
<li id="li1"></li>
<ul contenteditable="true">
<li id="li2"></li>
<embed>a;#2