LayoutTests/editing/execCommand/resources/insert-image-changing-visibility-crash-iframe.html - Issue 183893018: Check VisualPosition.isNull() after DOM mutation in ReplaceSelectionCommand

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/editing/execCommand/resources/insert-image-changing-visibility-crash-iframe.html

Issue 183893018: Check VisualPosition.isNull() after DOM mutation in ReplaceSelectionCommand (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master

Patch Set: Update Created 6 years, 9 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « LayoutTests/editing/execCommand/insert-image-changing-visibility-crash-expected.txt ('k') | Source/core/editing/ReplaceSelectionCommand.cpp » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
(Empty)
	1 <!DOCTYPE html>

	2 <html>

	3 <head>

	4 <title>Issue 348283 crash test case</title>

	5 <style>

	6 table {

	7 visibility: collapse;

	8 }

	9

	10 *:only-child {

	11 visibility: visible;

	12 }

	13 </style>

	14 </head>

	15 <!-- This is a minified version of the clusterfuzz test case at https://code.goo gle.com/p/chromium/issues/detail?id=348283 -->

	16 <body contenteditable="true">

	17 <script>

	18 window.onload = function () {

	19 var table = document.getElementById('table');

	20 table.insertAdjacentHTML('afterbegin', '<svg></svg><div><div id=\'div\'>text </div>');

	21

	22 var div = document.getElementById('div');

	23 var selection = window.getSelection();

	24 selection.collapse(div.firstChild, 0);

	25 document.execCommand('InsertImage', false, 'about:blank');

	26 window.parent.postMessage('FINISH', '*');

	27 };

	28 </script>

	29

	30 <table id="table" ></table>

	31 <div></div>

	32 </body>

	33 </html>

OLD	NEW