layout/painting/crashtests/1430589-1.html

   1 <html class="reftest-wait"><head>
   2 <meta http-equiv="content-type" content="text/html; charset=UTF-8">
   3   <style>
   4     :root {
   5       flex-wrap: wrap-reverse;
   6     }
   7     menuitem {
   8       -webkit-mask-image: url(data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7);
   9     }
  10
  11     * {
  12       margin-right: -1px;
  13       display: -webkit-box;
  14       overflow: scroll;
  15     }
  16
  17
  18     .css1 {
  19       -webkit-border-bottom-left-radius: 10px;
  20     }
  21
  22
  23   </style>
  24 <script>
  25 function BOOM(){
  26   setTimeout(() => {
  27     var elem = document.getElementById("vuln");
  28     elem.style.width = 600;
  29     elem.style.height = 600;
  30     window.requestAnimationFrame(() => {
  31       window.requestAnimationFrame(() => {
  32         document.documentElement.removeAttribute("class");
  33       });
  34     });
  35   }, 0);
  36 }
  37
  38 document.addEventListener("MozReftestInvalidate", BOOM);
  39 //window.addEventListener("load", BOOM);
  40 </script></head>
  41
  42 <body>
  43   <footer>
  44       <textarea id="vuln" style="width: 500px; height: 500px;">Ashitaka</textarea>
  45   </footer>
  46   <menu>
  47     <menuitem>
  48       <iframe></iframe>
  49   </menuitem></menu>
  50   <menuitem>
  51   <hr>
  52   <dialog class="css1"></dialog>
  53
  54
  55 </menuitem></body></html>