contain-size-layout-abspos-flex-container-crash.html (894B)
1 <!DOCTYPE html> 2 <html> 3 <meta charset="UTF-8"> 4 <link rel="author" title="Ting-Yu Lin" href="mailto:tlin@mozilla.com"> 5 <link rel="author" title="Mozilla" href="https://www.mozilla.org/"> 6 <link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1678469"> 7 <meta name="assert" content="This test ensures that the browser does not crash after removing the element 'c'."> 8 9 <style> 10 html { columns: 0 } 11 body { 12 transform: rotate(14deg); 13 } 14 #flex-container { 15 display: flex; 16 contain: size layout; 17 position: absolute; 18 width: 100px; 19 height: 100px; 20 } 21 </style> 22 23 <script> 24 function boom() { 25 let flex = document.getElementById('flex-container'); 26 let c = document.getElementById('c'); 27 flex.removeChild(c); 28 } 29 </script> 30 31 <body onload="boom()"> 32 <div id="flex-container"> 33 x 34 <div id="c"></div> 35 </div> 36 </body> 37 </html>