blob: 66a1509d5f60b77a532195c27de0a6469a40fd7c [file] [log] [blame]
<!DOCTYPE html><!-- webkit-test-runner [ enableKeygenElement=true ] -->
<html>
Webkit Bug 86019 - Crash due to floats not removed from first-letter element.
<style>
.li2 { width: 0px; }
.li2:first-letter { float: left; content: counter(section); }
.li2:first-of-type { display: -webkit-inline-flexbox; }
</style>
<script>
if (window.testRunner)
testRunner.dumpAsText();
function crash() {
li1 = document.createElement('li');
document.documentElement.appendChild(li1);
keygen1 = document.createElement('keygen');
keygen1.setAttribute('autofocus', 'autofocus');
document.documentElement.appendChild(keygen1);
li2 = document.createElement('li');
li2.setAttribute('class', 'li2');
document.documentElement.appendChild(li2);
text1 = document.createTextNode("PASS. WebKit didn't crash.");
li2.appendChild(text1);
}
window.onload = crash;
</script>
</html>