Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: layout/forms/crashtests/crashtests.list
<head>
<script type="text/javascript">
<![CDATA[
function boom()
{
var option = document.getElementsByTagName("option")[0];
var b = option.firstChild;
option.appendChild(document.createTextNode("\u064A"));
document.documentElement.offsetHeight;
option.removeChild(b);
}
]]>
</script>
</head>
<body onload="boom();"><select><option>B </option></select></body>
</html>