additional crashtest for bug 645072

This commit is contained in:
Jonathan Kew 2011-03-30 07:39:11 +01:00
parent de1012f0b9
commit df641cb631
2 changed files with 19 additions and 0 deletions

View File

@ -0,0 +1,17 @@
<!DOCTYPE html>
<html>
<head>
<script>
function boom()
{
document.documentElement.offsetHeight;
document.getElementById("f").appendChild(document.createTextNode("\u00AD"));
document.documentElement.offsetHeight;
}
</script>
</head>
<body onload="boom();"><fieldset id="f"> </fieldset></body>
</html>

View File

@ -354,3 +354,5 @@ load 604843.html
load 605340.html load 605340.html
load 621841-1.html load 621841-1.html
load 645072-1.html load 645072-1.html
load 645072-2.html