Blame layout/generic/crashtests/368752.html

Packit f0b94e
<html class="reftest-wait"><head>
Packit f0b94e
<title>Testcase bug - Crash [@ nsIFrame::Invalidate] with display: inherit, large margin and padding and generated content</title>
Packit f0b94e
<script>
Packit f0b94e
function addstyle(){
Packit f0b94e
var x=document.createElementNS('http://www.w3.org/1999/xhtml','style');
Packit f0b94e
x.innerHTML='body::before {content: "text"; }';
Packit f0b94e
document.documentElement.appendChild(x);
Packit f0b94e
document.documentElement.offsetHeight;
Packit f0b94e
document.documentElement.removeAttribute("class");
Packit f0b94e
}
Packit f0b94e
</script>
Packit f0b94e

Packit f0b94e
</head>
Packit f0b94e
<body onload="setTimeout(addstyle,0);">
Packit f0b94e
Packit f0b94e
Packit f0b94e
t
Packit f0b94e

Packit f0b94e

Packit f0b94e
</body></html>