| <!DOCTYPE html> | |
| <html> | |
| <body onload="crash()"> | |
| <!-- Test for https://bugs.webkit.org/show_bug.cgi?id=94487 --> | |
| <input/> | |
| <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> | |
| <g> | |
| <tref xlink:href="#target"/> | |
| <g id="target"></g> | |
| </g> | |
| </svg> | |
| <input/> | |
| <div>PASS: did not crash.</div> | |
| <script> | |
| if (window.testRunner) | |
| testRunner.dumpAsText(); | |
| function crash() { | |
| document.designMode='on'; | |
| document.execCommand('selectall'); | |
| document.execCommand('FormatBlock', false, '<'+'pre>'); | |
| } | |
| </script> | |
| </body> | |
| </html> |