blob: 2d285b4d849f853308222b3e794ef786402e4aff [file] [log] [blame]
<body id=theBody>
<style>
.bogus-shape-outside:not(h1) { shape-outside: url(#no-such-anchor); }
</style>
<script>
if (window.testRunner) {
testRunner.waitUntilDone();
testRunner.dumpAsText();
}
function initCF() {
setTimeout("tCFcrash()", 0);
}
document.addEventListener("DOMContentLoaded", initCF, false);
function tCFcrash() {
theBody.classList.add("bogus-shape-outside");
rr3706 = document.createRange();
window.getSelection().addRange(rr3706);
theBody.style.display = "table-row";
theBody.setAttribute("class", "c11");
if (window.testRunner)
testRunner.notifyDone();
}
</script>
This test should not crash.
<!--
Based on https://cluster-fuzz.appspot.com/testcase?key=4709517736542208
-->