nested-details-crash.html (805B)
1 <!doctype HTML> 2 <link rel=author href="mailto:vmpstr@chromium.org"> 3 <link rel=help href="https://crbug.com/1270206"> 4 5 <script type="text/javascript"> 6 function eventHandler1() { 7 document.getElementById('target').insertAdjacentText("afterEnd", ""); 8 document.getElementById('target').focus(); 9 document.getElementById('target').hidden = "true"; 10 } 11 function operate() { 12 document.addEventListener('DOMNodeInsertedIntoDocument', eventHandler1, true); 13 } 14 function exec_event() { 15 event = new Event('DOMNodeInsertedIntoDocument') 16 document.dispatchEvent(event) 17 } 18 function go(){ 19 operate(); 20 exec_event(); 21 } 22 </script> 23 <body onload="go();" contentEditable="true"> 24 <details onselectstart='eventHandler2();'> 25 <dfn id='target' class=onload='eventHandler1();'> 26 <details id= onmsgesturehold='eventHandler2();'>