third_party/WebKit/LayoutTests/fast/dom/Range/range-extract-contents-event-fire-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <body>
   4 <p>
   5     <span>
   6         <span id="start"></span>
   7     </span>
   8 </p>
   9 <p>
  10     <span>
  11         <span id="end"></span>
  12     </span>
  13 </p>
  14 <script>
  15 if (window.testRunner)
  16     testRunner.dumpAsText();
  17
  18 function runTest()
  19 {
  20     document.removeEventListener("DOMSubtreeModified", runTest, false);
  21     document.body.innerHTML = 'PASS: does not crash';
  22 }
  23
  24 document.addEventListener("DOMSubtreeModified", runTest, false);
  25
  26 var r = document.createRange();
  27 r.setStartBefore(document.getElementById('start'));
  28 r.setEndAfter(document.getElementById('end'));
  29 r.extractContents();
  30 </script>
  31 </body>
  32 </html>