editor/libeditor/crashtests/1424450.html

   1 <script>
   2 function go() {
   3   let selection = window.getSelection();
   4   selection.setPosition(htmlvar00007, 1);
   5   selection.setBaseAndExtent(htmlvar00011, 0, htmlvar00043, 0);
   6   svgvar00014.before(svgvar00008.previousElementSibling);
   7
   8   document.execCommand("removeFormat", false);
   9   document.execCommand("hiliteColor", false, "-moz-buttondefault");
  10   document.execCommand("insertText", false, "");
  11 }
  12 function eh1() {
  13   svgvar00007.appendChild(htmlvar00011);
  14   htmlvar00003.appendChild(htmlvar00035);
  15 }
  16 </script>
  17 <body onload=go()>
  18 <span id="htmlvar00003">
  19 <pre id="htmlvar00007" contenteditable="true">
  20 <fieldset id="htmlvar00011"></fieldset>
  21 <iframe srcdoc="H"></iframe>
  22 <a id="htmlvar00035" hidden="hidden" contenteditable="true">
  23 <svg>
  24 <set onbegin="eh1()"/>
  25 <use id="htmlvar00043">
  26 <desc id="svgvar00007"></desc>
  27 </use>
  28 <font-face-uri id="svgvar00008"/>
  29 <feComponentTransfer id="svgvar00014">