| OLD | NEW |
| (Empty) | |
| 1 <!DOCTYPE html> |
| 2 <html> |
| 3 <head> |
| 4 <script> |
| 5 function runTest() { |
| 6 if (window.testRunner) |
| 7 testRunner.dumpAsText(); |
| 8 |
| 9 if (sessionStorage.pageReloaded) |
| 10 return; |
| 11 |
| 12 img = document.createElement('img'); |
| 13 img.src = `data:image/svg+xml, |
| 14 <svg xmlns="http://www.w3.org/2000/svg"> |
| 15 <foreignObject> |
| 16 <body xmlns="http://www.w3.org/1999/xhtml"> |
| 17 <marquee></marquee> |
| 18 </body> |
| 19 </foreignObject> |
| 20 </svg>`; |
| 21 document.body.appendChild(img); |
| 22 |
| 23 sessionStorage.pageReloaded = true; |
| 24 window.location.reload(); |
| 25 } |
| 26 </script> |
| 27 </head> |
| 28 <body onload='runTest()'> |
| 29 Test passes if it does not crash on ASan builds. |
| 30 </body> |
| 31 </html> |
| OLD | NEW |