blob: d1ea12d44cd882279e9588c2e01feaeed89a0fc8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
<!DOCTYPE html>
<html>
<script>
if (window.testRunner) {
testRunner.dumpAsText();
testRunner.waitUntilDone();
}
function crash() {
document.body.innerHTML = "PASS. WebKit didn't crash.";
testRunner.notifyDone();
}
</script>
<object>
<input autofocus onfocus="crash()">
</object>
<style>
.abc::first-child {
font: 2147483647 small-caps 3507521020px sans-serif;
}
</style>
</html>
|
