Add LayoutTest for crash with bidi isolates
[WebKit-https.git] / LayoutTests / fast / text / international / unicode-bidi-isolate-nested-with-removes.html
1 <!-- This tests for regression of https://crbug.com/265838 where adjacent, nested isolates caused a use-after-free if the elements were later removed. -->
2 <script>
3 function remove(node)
4 {
5     node.parentNode.removeChild(node);
6 }
7
8 window.onload = function()
9 {
10     document.body.offsetTop;
11     remove(b.lastChild);
12     document.body.offsetTop;
13     remove(a.firstChild);
14     document.body.offsetTop;
15
16     document.body.appendChild(document.createTextNode("PASS did not crash"));
17 }
18 </script>
19
20 <body>
21   <div id="a">foo</div>
22   <div></div>
23   <div>
24     <output>
25         <output>bar</output>
26         <span id="b">
27             <span><div style="display:inline-block"></div><br><br><br></span>
28         </span>
29     </output>
30   </div>
31 </body>
32
33 <script>
34 if (window.testRunner)
35     testRunner.dumpAsText();
36 </script>