| OLD | NEW |
| (Empty) |
| 1 <!DOCTYPE html> | |
| 2 <html> | |
| 3 <script> | |
| 4 if (window.testRunner) | |
| 5 testRunner.dumpAsText(); | |
| 6 | |
| 7 onload = function() { | |
| 8 tSpanElement = document.getElementById('tSpanInFirstRoot'); | |
| 9 tSpanElement.appendChild(document.createTextNode(unescape('%ufe9e%ue28f%ue
47e'))); | |
| 10 | |
| 11 document.body.offsetTop; | |
| 12 document.body.style.zoom=0.9; | |
| 13 | |
| 14 document.designMode='on'; | |
| 15 filterInFirstRoot = document.getElementById('filterInFirstRoot'); | |
| 16 useElement = document.getElementById('useElement'); | |
| 17 window.getSelection().setBaseAndExtent(filterInFirstRoot, useElement, 5); | |
| 18 document.execCommand('ForwardDelete'); | |
| 19 document.designMode='off'; | |
| 20 } | |
| 21 </script> | |
| 22 <body> | |
| 23 <svg xmlns="http://www.w3.org/2000/svg"> | |
| 24 <text> | |
| 25 <filter id="filterInFirstRoot"/> | |
| 26 <tspan id="tSpanInFirstRoot"/> | |
| 27 </text> | |
| 28 <path filter="url(#filterInSecondRoot)"/> | |
| 29 </svg> | |
| 30 | |
| 31 <svg xmlns="http://www.w3.org/2000/svg"> | |
| 32 <use id="useElement"/> | |
| 33 <filter id="filterInSecondRoot"/> | |
| 34 </svg> | |
| 35 | |
| 36 <p>Test Passes if there is no crash in Debug or Asan builds.</p> | |
| 37 </body> | |
| 38 </html> | |
| OLD | NEW |