Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1368)

Unified Diff: third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2.html

Issue 2653113002: Clear out the float-lists from a ruby base when moving its children (Closed)
Patch Set: Created 3 years, 11 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2-expected.txt » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2.html
diff --git a/third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2.html b/third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2.html
new file mode 100644
index 0000000000000000000000000000000000000000..3b9887e0d89ee62bd49636e82efc730137d7c0f5
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2.html
@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<style id="style">
+.float{float:left;}
+.list-item{display:list-item;}
+</style>
+<p>crbug.com/683104: Passes if it does not crash.</p>
+<ruby id="ruby">
+ <rb>
+ <div class="float list-item"></div>
+ Text
+ <input class="list-item">
+ <rt id="rt" class="list-item">
+ <rtc></rtc>
+ </rt>
+ </rb>
+</ruby>
+<script>
+ if (window.testRunner)
+ testRunner.dumpAsText();
+ document.body.offsetTop;
+ var oElement = document.getElementById("style");
+ oElement.insertAdjacentHTML('afterbegin', '<summary><_______ZZ(((P%%%%8</summary>');
+ document.execCommand(false);
+ var newElement = document.getElementById("rt");
+ oElement.parentNode.replaceChild(newElement, oElement)
+</script>
« no previous file with comments | « no previous file | third_party/WebKit/LayoutTests/fast/block/float/rubybase-children-moved-crash-2-expected.txt » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698