third_party/WebKit/LayoutTests/editing/execCommand/resources/insert-image-changing-visibility-crash-iframe.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <title>Issue 348283 crash test case</title>
   5 <style>
   6 table {
   7     visibility: collapse;
   8 }
   9
  10 *:only-child {
  11     visibility: visible;
  12 }
  13 </style>
  14 </head>
  15 <!-- This is a minified version of the clusterfuzz test case at https://code.google.com/p/chromium/issues/detail?id=348283 -->
  16 <body contenteditable="true">
  17 <script>
  18 window.onload = function () {
  19     var table = document.getElementById('table');
  20     table.insertAdjacentHTML('afterbegin', '<svg></svg><div><div id=\'div\'>text</div>');
  21
  22     var div = document.getElementById('div');
  23     var selection = window.getSelection();
  24     selection.collapse(div.firstChild, 0);
  25     document.execCommand('InsertImage', false, 'about:blank');
  26     window.parent.postMessage('FINISH', '*');
  27 };
  28 </script>
  29
  30 <table id="table" ></table>
  31 <div></div>
  32 </body>
  33 </html>