Backed out changeset 496886cb30a5 (bug 1867152) for bc failures on browser_user_input...
[gecko.git] / layout / tables / crashtests / 339315-1.html
blob2c0419b6de05ed85890c8022984ceaf18200b9ae
1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
2 <html>
4 <head>
5 <script>
7 function boom() {
8 var table = document.getElementById("table");
10 var doomed = document.getElementById("doomed");
11 doomed.remove();
13 var colgroup1 = document.createElement("colgroup");
14 table.appendChild(colgroup1);
16 var thead = document.createElement("thead");
17 var tr = document.createElement("tr");
18 var td = document.createElement("td");
19 td.setAttribute("colspan", 0);
20 tr.appendChild(td);
21 thead.appendChild(tr);
22 table.insertBefore(thead, colgroup1);
24 colgroup1.remove();
26 var colgroup2 = document.createElement("colgroup");
27 table.appendChild(colgroup2);
30 </script>
31 </head>
33 <body onload="boom();">
35 <table id="table"><tbody><tr id="doomed"><td>x</tr></tbody></table>
37 </body>
38 </html>