forked from mirrors/gecko-dev
The reported issue is hitting `MOZ_ASSERT` in the constructor of `CreateElementTransaction`, and `CreateElementTransaction` is now replaced with `InsertNodeTransaction`. Therefore, the bug itself is never reproducible. We should just add the reported testcase as a crashtest of WPT for now. Perhaps, we should add tests for the cases that selection is collapsed in comment node. However, it's not urgent and I don't have much time to do it right now. Depends on D139718 Differential Revision: https://phabricator.services.mozilla.com/D139719
20 lines
572 B
HTML
20 lines
572 B
HTML
<!doctype html>
|
|
<html>
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<script>
|
|
document.addEventListener("DOMContentLoaded", () => {
|
|
const element_0 = document.createElement("s");
|
|
const element_1 = document.createElement("a");
|
|
const element_2 = document.createElement("l");
|
|
element_2.setAttribute("contenteditable", "true");
|
|
element_1.appendChild(element_2);
|
|
element_0.appendChild(element_1);
|
|
document.documentElement.appendChild(element_0);
|
|
document.designMode = "on";
|
|
document.execCommand("insertLineBreak");
|
|
});
|
|
</script>
|
|
</head>
|
|
<body><!-- COMMENT --></body>
|
|
</html>
|