Mypal/layout/tables/crashtests/456041.html
2019-03-11 13:26:37 +03:00

20 lines
456 B
HTML

<html>
<head>
<title> Bug 456041 - Crash [@ nsCellMapColumnIterator::GetNextFrame] with contenteditable, generated content on table and double tbody</title>
<script>
//setTimeout(function() {window.location.reload();}, 500);
</script>
</head>
<body>
<span contenteditable="true"></span>
<style id="e">body table::after { content:"b";}</style>
<table>
<script>document.body.offsetHeight;</script>
<tbody></tbody>
<tbody></tbody>
</table>
</body>
</html>