Test for bug 815500

This commit is contained in:
Simon Montagu 2012-12-16 07:35:07 -08:00
parent f8c71d8f54
commit 57de20c186
2 changed files with 15 additions and 0 deletions

View File

@ -0,0 +1,14 @@
>><address id=test1> A,*/^㰞﷑ dq豑><script>
function initCF() {
try { test2 = document.createElementNS("http://www.w3.org/1999/xhtml", "tt"); } catch(e) {}
try { test2.setAttribute("dir", "auto"); } catch(e) {}
setTimeout("CFcrash()", 253);
}
document.addEventListener("DOMContentLoaded", initCF, false);
function editFuzz() {
}
function CFcrash() {
try { test2.appendChild(test1); } catch(e) {}
setTimeout('try { test2.setAttribute("dir", "&locale.dir;"); } catch(e) {}', 462);
try { test1.innerHTML = "Z3 ᜃ 洿G0겨=#⨝ g B md^뛳 j # 鮪 8媾䝀 &#x30054;ᖾd煏됚M:㕑,i⼷ Geኔ ≴핛 "; } catch(e) {}
}</script>>

View File

@ -116,4 +116,5 @@ load 752226-2.html
HTTP(..) load xhr_abortinprogress.html
load 786854.html
load xhr_empty_datauri.html
load 815500.html
load 816253.html