blob: 94b57285e1b9ec6d9eee102c1343b5d0990e2f8c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
<!doctype html>
<title>BODY list-item crash inserting extra BODY</title>
<link rel="help" href="https://crbug.com/1298917">
<style>
body {
display: list-item;
}
div {
/* Multicol and table display to trigger legacy layout */
display: table-row-group;
column-count: 1;
}
</style>
<body>
<p>Pass if no crash.</p>
<div></div>
</body>
<script>
document.documentElement.offsetTop;
document.documentElement.insertBefore(document.createElement("body"), document.body);
</script>
|
