third_party/WebKit/LayoutTests/fast/text/editing-text-crash.html

   1 <!DOCTYPE html>
   2 <script>
   3 if (window.testRunner)
   4   testRunner.dumpAsText();
   5
   6 window.onload = function() {
   7   document.getElementById('object').appendChild(document.getElementById('meta'));
   8   document.execCommand('FindString', false, 'test');
   9 };
  10 </script>
  11 <style>
  12   caption:first-line { visibility: hidden; }
  13   caption:first-letter { color: red; }
  14 </style>
  15
  16 The test passes if it does not CRASH in debug builds.
  17
  18 <meta id='meta'></meta>
  19 <object id='object'>
  20   <table>
  21     <caption dir="rtl">)))TQ?</caption>
  22   </table>
  23 </object>