| <!DOCTYPE html> | |
| <script src="../../../resources/js-test.js"></script> | |
| <script> | |
| description("Invalid img.srcset URL should not crash"); | |
| window.jsTestIsAsync = true; | |
| if (window.testRunner) { | |
| testRunner.dumpAsText(); | |
| testRunner.waitUntilDone(); | |
| } | |
| function done() { | |
| testPassed("no crash."); | |
| finishJSTest(); | |
| } | |
| </script> | |
| <img src="1x.png" srcset="//&%dE,; 1.2x" onerror="done()"> |