editor/libeditor/crashtests/1364133.html

   1 <html>
   2   <head>
   3     <script>
   4       var tr = document.createElement('tr');
   5       document.documentElement.appendChild(tr);
   6
   7       var a1 = document.createElement('a');
   8       document.documentElement.appendChild(a1);
   9       var a2 = document.createElement('a');
  10       tr.appendChild(a2);
  11
  12       var a3 = document.createElement('a');
  13       document.documentElement.appendChild(a3);
  14
  15       var a4 = document.createElement('a');
  16       document.documentElement.appendChild(a4);
  17
  18       var a5 = document.createElement('a');
  19       a1.appendChild(a5);
  20
  21       var input = document.createElement('input');
  22       document.documentElement.appendChild(input);
  23
  24       a3.contentEditable = true;
  25       a5.innerText = "xx";
  26       a4.outerHTML = "";
  27       input.select();
  28
  29       document.replaceChild(document.documentElement, document.documentElement);
  30       window.find("x", false, false, false, false, false, false);
  31
  32       var range = document.createRange();
  33       range.setStart(a1, 1);
  34       window.getSelection().addRange(range);
  35
  36       document.designMode = "on";
  37
  38       range.selectNode(a2);
  39       document.execCommand("forecolor", false, "-moz-default-background-color");
  40     </script>
  41   </head>
  42 </html>