editor/libeditor/crashtests/1388075.html

   1 <html>
   2 <head>
   3 <script>
   4 try {
   5   var style = document.createElement("style");
   6 } catch(e) {}
   7 try {
   8   var output = document.createElement("output");
   9 } catch(e) {}
  10 try {
  11   var input = document.createElement("input");
  12 } catch(e) {}
  13 try {
  14   var script = document.createElement("script");
  15 } catch(e) {}
  16 try {
  17   var clonedOutput = output.cloneNode(false);
  18 } catch(e) {}
  19 try {
  20   document.documentElement.appendChild(style);
  21 } catch(e) {}
  22 try {
  23   style.outerHTML = '<a contenteditable="true">';
  24 } catch(e) {}
  25 // For emulating the traditional behavior, collapse Selection to end of the
  26 // <body> which must be empty (<style> was added after the <body>).
  27 getSelection().collapse(document.body, document.body.childNodes.length);
  28 try {
  29   document.documentElement.appendChild(input);
  30 } catch(e) {}
  31 try {
  32   var text = document.createTextNode(" ");
  33 } catch(e) {}
  34 try {
  35   script.appendChild(text);
  36 } catch(e) {}
  37 try {
  38   document.documentElement.appendChild(script);
  39 } catch(e) {}
  40 try {
  41   var selection = getSelection();
  42 } catch(e) {}
  43 try {
  44   input.select();
  45 } catch(e) {}
  46 try {
  47   document.replaceChild(document.documentElement, document.documentElement);
  48 } catch(e) {}
  49 try {
  50   selection.setBaseAndExtent(text, 0, clonedOutput, 0);
  51 } catch(e) {}
  52 try {
  53   document.designMode = "on";
  54 } catch(e) {}
  55 try {
  56   document.execCommand("insertImage", false, "http://localhost/");
  57 } catch(e) {}
  58 </script>
  59 </head>
  60 </html>