| OLD | NEW |
| (Empty) | |
| 1 <!DOCTYPE html> |
| 2 <script> |
| 3 if (window.testRunner) |
| 4 testRunner.dumpAsText(); |
| 5 |
| 6 function crash() { |
| 7 document.execCommand("SelectAll", false); |
| 8 |
| 9 document.designMode = "on"; |
| 10 document.getElementById("select").textContent = 'Lorem'; |
| 11 |
| 12 document.execCommand('FormatBlock', false, '<blockquote>'); |
| 13 var oSelection = window.getSelection(); |
| 14 var oRange = oSelection.getRangeAt(0); |
| 15 var oInsertedElement = document.getElementsByTagName("wrapper")[1]; |
| 16 oRange.insertNode(oInsertedElement) |
| 17 |
| 18 document.execCommand('InsertText', false, "Lorem ipsum"); |
| 19 document.execCommand('Undo', false, false); |
| 20 } |
| 21 window.addEventListener("load", crash, false); |
| 22 </script> |
| 23 <style> |
| 24 .columnCount{-webkit-column-count:1;} |
| 25 .caption{display:table-caption;} |
| 26 .columnSpanAll{-webkit-column-span:all;} |
| 27 </style> |
| 28 <body class="columnCount"> |
| 29 <div> |
| 30 <input></input> |
| 31 <div class="caption"> |
| 32 <wrapper> |
| 33 <select id="select">This test has PASSED if it didn't CRASH.</select
> |
| 34 <div class="caption"></div> |
| 35 </wrapper> |
| 36 </div> |
| 37 </div> |
| 38 <table class="columnSpanAll"> |
| OLD | NEW |