зеркало из https://github.com/mozilla/pjs.git
bug 339130 - crash test by Jesse Ruderman.
This commit is contained in:
Родитель
447755bb98
Коммит
4c5241f747
|
@ -0,0 +1,37 @@
|
|||
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
|
||||
<html>
|
||||
|
||||
<head>
|
||||
<script>
|
||||
|
||||
function boom()
|
||||
{
|
||||
var table = document.getElementById("table");
|
||||
|
||||
table.insertBefore(document.createElement("thead"), document.getElementById("A"));
|
||||
|
||||
var tb2 = document.createElement("tfoot");
|
||||
var tr1 = document.createElement("tr");
|
||||
tb2.appendChild(tr1);
|
||||
table.appendChild(tb2);
|
||||
|
||||
var tr = document.createElement("tr");
|
||||
var td = document.createElement("td");
|
||||
td.appendChild(document.createTextNode("td"));
|
||||
td.setAttribute("rowspan", 0);
|
||||
tr.appendChild(td);
|
||||
document.getElementById("B").appendChild(tr);
|
||||
}
|
||||
|
||||
</script>
|
||||
</head>
|
||||
<body onload="boom();">
|
||||
|
||||
<table id="table">
|
||||
<tfoot id="A"><tr><td>td</td></tr></tfoot>
|
||||
<tfoot id="B"><tr><td>td</td></tr></tfoot>
|
||||
<thead></thead>
|
||||
</table>
|
||||
|
||||
</body>
|
||||
</html>
|
|
@ -32,6 +32,7 @@ load 323489-1.html
|
|||
load 331344-1.html
|
||||
load 331446-1.xhtml
|
||||
load 331690-1.html
|
||||
load 339130-1.html
|
||||
load 339315-1.html
|
||||
load 341227-1.xhtml
|
||||
load 343588-1.xhtml
|
||||
|
|
Загрузка…
Ссылка в новой задаче