third_party/WebKit/LayoutTests/fast/css-generated-content/quote-first-letter-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <style>
   4 .class1::first-letter { position: inherit; }
   5 .class1:after { visibility: inherit; content: open-quote; }
   6 </style>
   7 <script>
   8 if (window.testRunner)
   9     testRunner.dumpAsText();
  10
  11 function crash() {
  12     element1 = document.createElement('hr');
  13     element1.setAttribute('class', 'class1');
  14     document.documentElement.appendChild(element1);
  15     element2 = document.createElement('td');
  16     element2.setAttribute('class', 'class1');
  17     document.documentElement.appendChild(element2);
  18     document.documentElement.offsetTop;
  19     document.open();
  20     document.write("PASS. Test didn't crash.");
  21     document.close();
  22 }
  23 window.onload = crash;
  24 </script>
  25 </html>