layout/generic/crashtests/963878.html
author Noemi Erli <nerli@mozilla.com>
Sat, 12 Jan 2019 00:00:06 +0200
changeset 453615 1ddef6cf6c7ee86191872cac0782b9f6dc01c923
parent 390804 086fe27b86500e89f56637f540ba53d638981189
permissions -rw-r--r--
Merge mozilla-central to inbound. a=merge CLOSED TREE

<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<script>

function repeatManyTimes(s)
{
    while (s.length < 0x8000)
        s = s + s;
    return s;
}

function boom()
{
    var initialText =
        "\u062A" + // ARABIC LETTER TEH
        repeatManyTimes(
            "\u2029" + // PARAGRAPH SEPARATOR
            "\u202D" + // LEFT-TO-RIGHT OVERRIDE
            " "
        ) +
        "1"; // THE LONELIEST ASCII CHARACTER

    var textNode = document.createTextNode(initialText);
    document.getElementById("v").appendChild(textNode);
    document.documentElement.offsetHeight;
    textNode.data = "*" + textNode.data;
}

</script>
</head>

<body onload="boom();">
<div id="v" style="display: table-row; font-size: 500%;"></div>
</body>
</html>