summaryrefslogtreecommitdiffstats
path: root/third_party/WebKit/LayoutTests/fast/parser/nested-fragment-parser-crash.html
blob: dcf3e5cff085a4a36e6ac50f0ecc04f34ede4fbc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
x<h4><strike>x
This test passes if it doesn't crash.
<script>
  if (window.testRunner)
    testRunner.dumpAsText();

  var counter = 0;
  window.onload=function(){
    document.execCommand("SelectAll");
    document.designMode="on";
    document.execCommand("Indent");
    document.execCommand("InsertOrderedList", false);
  };
  function handler() {
    // This constant is somewhat magic. It's the smallest constant such that
    // we'll exceed the maxium call stack size.
    if (++counter >= 34)
      document.removeEventListener("DOMSubtreeModified", handler, false);
    document.execCommand("outdent", false);
  };
  document.addEventListener("DOMSubtreeModified", handler, false);
</script>