Bug 451170 - crash test

This commit is contained in:
Martijn Wargers 2013-05-12 23:09:30 +02:00
parent dd766be282
commit cdd0939d37
2 changed files with 22 additions and 0 deletions

View File

@ -0,0 +1,21 @@
<html>
<head>
<script>
function doe() {
document.getElementById('a').style.display = 'table-column-group';
document.body.offsetHeight;
}
</script>
<style>
div::before { content:"b";}
div::after { content:"a";}
</style>
</head>
<body onload="document.body.offsetHeight; setTimeout(doe,0);">
<div style="display: table;">
<span id="a" style="display: table-header-group; "></span>
</div>
</body>
</html>

View File

@ -103,6 +103,7 @@ load 430374.html
load 444431-1.html
load 448988-1.xhtml
load 450311-1.html
load 451170.html
load 451355-1.html
load 456041.html
load 457115.html