first-letter-first-line-dynamic-001-crash.html (719B)
1 <!DOCTYPE html> 2 <link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1999396"> 3 <script> 4 document.addEventListener("DOMContentLoaded", () => { 5 o3 = document.createElement('div'); 6 document.body.appendChild(o3); 7 o14 = document.createElement('style'); 8 document.documentElement.appendChild(o14); 9 o18 = document.createElement('style'); 10 o14.appendChild(o18); 11 s4 = unescape('%u06A10'); 12 o3.appendChild(document.createTextNode(s4)); 13 o59 = document.createTextNode("{}:first-letter{ all: inherit;'x'}\n*{ float: left }:first-line{}"); 14 o18['before'](o18, -1, o59); 15 document.documentElement.offsetHeight; 16 o3.appendChild(document.createTextNode(s4)); 17 o18['before'](o18, -1, o59); 18 }) 19 </script>