gecko-dev/editor/libeditor/crashtests/1648564.html

30 строки
850 B
HTML

<script>
window.addEventListener('load', () => {
// For emulating the traditional behavior, collapse Selection to end of the
// <body> (at the comment node).
getSelection().collapse(document.body, document.body.childNodes.length);
const map = document.querySelector("map");
const anchor = document.querySelector("a");
map.replaceChild(
anchor,
map.childNodes[(2828994049 % map.childNodes.length)]
);
anchor.innerHTML = "<o>";
getSelection().setBaseAndExtent(
document,
(2019424593 % document.childNodes.length),
document.documentElement,
(3503355750 % document.documentElement.childNodes.length)
);
document.designMode = "on";
document.execCommand("forwardDelete");
document.execCommand("forwardDelete");
});
</script>
<sub contenteditable>
<map>
<address></address>
<a>
</a>
<!-- COMMENT --></body>